Do we need to have all ports opened between kubernetes nodes

1/7/2019

I have a master node and two worker node kubernetes cluster. I see all pods running fine. When I run iptable rules, restart of pod is failing. Calico is used for networking.

kuberuntime_sandbox.go:54] CreatePodSandbox for pod "" failed: rpc error: code = Unknown desc = NetworkPlugin cni failed to set up pod "" network: context deadline exceeded

I opened the following ports Master (to accept traffic from worker node)

179,9099,5000,10248-10252,443,2379-2380

Worker (to accept traffic from master node)

179,9099,10248-10252,10250,2379-2380

I see the issue with above rules. When I open all ports, between the nodes, then I see the failed pod running. Can you please let me know whether do we need to have all ports opened between the nodes ? Or am I missing any port ?

-- Deepa Yr
calico
kubernetes

0 Answers