我已使用带有1个主节点和5个节点的kops在AWS上建立了私有K8集群。主节点和工作节点位于具有172.20.*.*子网的vpc上。
我们在开发环境中有另一个vpc，它在172.17.*.*子网中有实例。
除了使用堡垒主机外，无法从172.17实例访问172.20子网上的节点。现在，我已经安装了kube-dashboard并配置了一个服务来公开该仪表板，以便172.17上的实例可以访问它，但是它不起作用。
创建服务的脚本：
kind: Service
apiVersion: v1
metadata:
labels:
k8s-app: kubernetes-dashboard
name: kubernetes-dashboard
namespace: kube-system
annotations:
service.beta.kubernetes.io/aws-load-balancer-internal: 0.0.0.0/0
spec:
type: LoadBalancer
ports:
- port: 443
protocol: TCP
targetPort: 8443
selector:
k8s-app: kubernetes-dashboard
kubectl describe services kubernetes-dashboard -n kube-system
Name: kubernetes-dashboard
Namespace: kube-system
Labels: k8s-app=kubernetes-dashboard
Annotations: kubectl.kubernetes.io/last-applied-configuration:
{"apiVersion":"v1","kind":"Service","metadata":{"annotations":{"service.beta.kubernetes.io/aws-load-balancer-internal":"0.0.0.0/0"},"label...
service.beta.kubernetes.io/aws-load-balancer-internal: 0.0.0.0/0
Selector: k8s-app=kubernetes-dashboard Type: LoadBalancer IP: 100.68.65.76
LoadBalancer Ingress:
internal-a29aca39505ba11e9b822124a0b1194c-219044523.us-east-1.elb.amazonaws.com
Port: <unset> 443/TCP
TargetPort: 8443/TCP
NodePort: <unset> 31359/TCP
Endpoints:
100.103.144.50:8443
Session Affinity: None
External Traffic Policy:
Cluster Events:
Type Reason Age From Message
---- ------ ---- ---- -------
Normal Type 19m service-controller ClusterIP -> LoadBalancer Normal EnsuringLoadBalancer 19m service-controller Ensuring load balancer Normal EnsuredLoadBalancer 19m service-controller Ensured load balancer
当我尝试连接至lb`https://internal-a29aca39505ba11e9b822124a0b1194c-219044523.us-east-1.elb.amazonaws.com:443时，它超时。
请让我知道我在做什么错以及如何访问仪表板。 谢谢。