azure - 升级 kubernetes 版本后无法从 pod 中查看日志

Question

之前我可以使用 kubectl logs devops2-pdf-xxx 检查 pod 的日志。但是当我升级了 kubectl 版本后，我就无法这样做了。因此，看来服务运行得不好。

但是当我运行kubectl描述节点时，资源分配低于100％。

kubectl 日志 xxx:

Error from server: Get "https://aks-agentpool-123456-1:10250/containerLogs/default/devops2-deployment-123456-456/devops2-pdf": dial tcp 10.240.0.5:10250: i/o timeout

Answer 1

有多种选择可以解决此问题。这可能与关闭端口有关:

• 首先，检查您的端口 10250 是否已打开。类似问题描述here
• 您正在使用 AKS，因此请检查描述的解决方案 here :

Make sure that the default network security group isn't modified and that both port 22 and 9000 are open for connection to the API server. Check whether the tunnelfront pod is running in the kube-system namespace using the kubectl get pods --namespace kube-system command. If it isn't, force deletion of the pod and it will restart.

您也可以查看微软官方help page

These timeouts may be related to internal traffic between nodes being blocked. Verify that this traffic is not being blocked, such as by network security groups on the subnet for your cluster's nodes.

或this one .