-
Notifications
You must be signed in to change notification settings - Fork 4.9k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
DNS not working inside minikube pods since 23.6 #2302
Comments
I cannot reproduce it on minikube 0.24.1 (ISO 0.23.6), Fedora 27, VirtualBox 5.2.2 and Kubernetes 1.8.0.
|
I see the same behavior with k8s v1.8.0 (minikube version: v0.24.1, iso version 0.23.6). Maybe it is related to MacOS only? |
I can reproduce the issue with k8s v1.7.5 on Linux.. It doesn't seem to be a Mac-only issue. |
I believe the issue is related to upgrading an existing minikube cluster. I helped someone debug this in slack. The dns IP changed in /etc/resolv.conf of pods in the upgrade, but the actual kube-dns service's clusterIP wasn't updated to match |
I completely tear down and recreate for my use case and still have an issue. |
💯 it has to do with pulling the latest version of the minikube iso (0.23.6). Downgrading to 0.23.5 we no longer have this issue. 2 of us at our company are able to reproduce on Mac OSX 10.12.6 using k8s v1.8.0.
You can specify the actual Minikube ISO version like so:
As an aside, any reason the ISO semantic version is different than the minikube semantic version? That through us for a loop as well... 😄 |
Ok. @corymsmith and I have both verified that you don't need to downgrade the Minikube ISO on Mac OS X if you are using Virtual Box and We've not been able to get |
DNS broken for me as well after upgrading to minikube 0.24.1 (probably broke in a preceding version) on macOS 10.12.6. Solved by recreating the cluster by |
@norbertmocsnik it works for you know because you pulled kubernetes 1.8 when recreating your cluster. If you pull 1.7.5, you'll continue to have the same problem. |
I'm using 0.25.0 and Kubernetes 1.9.0 on MacOS and also have this issue. kube-dns is enabled and running. |
Same problem on: Minikube: v0.25.0 |
I'm haveing the same issue in Windows 10. Minikube: 0.25.0 |
Same issue: Linux MInt 18.3 |
Same here macOS: 10.12.6 tried with vm-driver: xhyve, virtualbox, hyperkit same result, |
On Minishift's end we have similar issues when we use the Minikube ISO. |
Running under macOS I've had the same trouble and the fix is stopping minikube and starting it again if your laptop ever sleeps or locks... Little bit painful but at least it will get it working. Running: macOS: 10.12.6 |
I was facing the same problem and solved with this: $ kubectl create clusterrolebinding add-on-cluster-admin --clusterrole=cluster-admin --serviceaccount=kube-system:default
I was getting $ kubectl logs kube-dns-7bb84f958d-6sglb -n kube-system -c kubedns
I0426 13:47:09.970362 1 dns.go:48] version: 1.14.4-2-g5584e04
I0426 13:47:09.971049 1 server.go:66] Using configuration read from ConfigMap: kube-system:kube-dns
I0426 13:47:09.971091 1 server.go:113] FLAG: --alsologtostderr="false"
I0426 13:47:09.971101 1 server.go:113] FLAG: --config-dir=""
I0426 13:47:09.971106 1 server.go:113] FLAG: --config-map="kube-dns"
I0426 13:47:09.971109 1 server.go:113] FLAG: --config-map-namespace="kube-system"
I0426 13:47:09.971112 1 server.go:113] FLAG: --config-period="10s"
I0426 13:47:09.971117 1 server.go:113] FLAG: --dns-bind-address="0.0.0.0"
I0426 13:47:09.971121 1 server.go:113] FLAG: --dns-port="10053"
...
I0426 13:47:13.986287 1 dns.go:174] Waiting for services and endpoints to be initialized from apiserver...
E0426 13:47:13.987510 1 reflector.go:199] k8s.io/dns/vendor/k8s.io/client-go/tools/cache/reflector.go:94: Failed to list *v1.Endpoints: endpoints is forbidden: User "system:serviceaccount:kube-system:default" cannot list endpoints at the cluster scope
E0426 13:47:13.987889 1 reflector.go:199] k8s.io/dns/vendor/k8s.io/client-go/tools/cache/reflector.go:94: Failed to list *v1.Service: services is forbidden: User "system:serviceaccount:kube-system:default" cannot list services at the cluster scope
E0426 13:47:13.989914 1 reflector.go:199] k8s.io/dns/vendor/k8s.io/client-go/tools/cache/reflector.go:94: Failed to list *v1.ConfigMap: configmaps is forbidden: User "system:serviceaccount:kube-system:default" cannot list configmaps in the namespace "kube-system"
... I hope this helps. |
I don't even have kube-dns pods even though the addon is enabled. What did I do?
(same for enable) |
I enabled DNS by creating these three manifests manually https://github.com/kubernetes/minikube/blob/master/deploy/addons/kube-dns/kube-dns-cm.yaml Just did kubectl apply -f |
I had the very same issue as @chilcano posted #2302 (comment). To solve my issue I've also created the cluster role binding but in my case it was for the namespace:user kube-system:kube-dns in short, the dns issue is yet not resolved in my case, but now logs looks normal:
minikube version: v0.28.2 |
I have the same issue: minikube version: v0.29.0 I have a CrashLoopBackOff of coredns with this log:
|
@lenlen I think that is related to coredns/coredns#2087 when minikube is with vm=none. Edit: it is fixed in K8 1.11 kubernetes/kubeadm#845 |
With systemd seems that we still need to care of this kubelet parameter kubernetes/kubeadm#845 |
@tjohnston-cd The problem was #2575 (comment) |
Closing as obsolete. minikube now uses CoreDNS rather than kube-dns. If you are seeing a similar behaviors, it's probably due to a different root cause - so please open a new bug. Thanks! |
I'm still seeing the same problem with: |
Solved the issue here by configuring our OpenVPN to use our internal IP when accessing k8s.gcr.io. |
Is this a BUG REPORT or FEATURE REQUEST? (choose one):
Bug report
Please provide the following details:
Environment:
Minikube version (use
minikube version
): v0.24.1cat ~/.minikube/machines/minikube/config.json | grep DriverName
): virtualboxcat ~/.minikube/machines/minikube/config.json | grep -i ISO
orminikube ssh cat /etc/VERSION
): v0.23.6.isoWhat happened:
I first noticed this issues when I wasn't able to reach Dockerhub inside a pod, but it looks like DNS is failing globally. I can ping 8.8.8.8, but if I try to reach anything using DNS, it fails.
Pinging 10.0.0.10 also fails to connect.
This used to work when I was on version .21. It's broken since I upgraded to .23.6 and .24.1.
What you expected to happen:
DNS to work.
How to reproduce it (as minimally and precisely as possible):
Start a pod using this yaml with the API version added:
I also saw this using the docker:stable-dind image.
Output of
minikube logs
(if applicable):I didn't see anything in the logs that looked relevant, I can post them if needed.
The text was updated successfully, but these errors were encountered: