除了 master 和 worker 之外，Kubernetes pods IP 应该可以从外部网络访问或 ping 通

Question

I have created a deployment with NodePort. Pod is created and pod has an IP. Only one container is running in a pod. I want to access that container/pod IP from external apart from Master or node. Now I'm able to ping the pod IP from master and node, but not from my device. Container/pod should be pingable from my device. I'm able to ping my device from my pod/container.

What needs to be done to make the pod IP visible/reachable from the outside?

Answer 1

You need to point to Service port (of type NodePort) on a node, not the pod IP.

kubectl get service <my-service>

Check what port did you get. Then get IP of any node of the k8s cluster

kubectl get nodes

And reach it like

telnet <node_ip>:<service_port>

More on service types: https://kubernetes.io/docs/concepts/services-networking/service/

Answer 2

如果你想访问你的pod，你应该这样做：${node-ip}:${nodeport}。但是你不能通过它的clusterIP访问你的pod，它只用于集群内通信。你可以获得外部IP通过将服务更改为 LoadBalancer，但 IP 由云提供商接收。

Answer 3

I agree with @Max Lobur and @Мартин Петков conclusions, that using NodePort type of Kubernetes services makes it possible to proxy underlying Pod service port to some port from the pool on the corresponded Node, therefore you might be able to reach Kubernetes Pod outside the cluster on Node IP address and related proxy port.

Alternatively, you can achieve communication with target Kubernetes Pod by applying External IP in a particular service to transmit network traffic to the related Node, however this is quite weighty solution, as it requires some routes to be implemented on external IP to forward network traffic to the nested Kubernetes Node.