2 Antworten
- Neueste
- Die meisten Stimmen
- Die meisten Kommentare
1
https://kubernetes.io/docs/concepts/services-networking/service/#defining-a-service https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies
The range listed is used for the virtual IPs for the services. For example:
kubectl get svc -A -o=custom-columns='DATA:spec.clusterIP'
DATA
172.20.74.199
172.20.0.1
172.20.123.203
172.20.0.10
beantwortet vor 2 Jahren
1
This is the IP address range used by Kubernetes services, see the launch announcement and the relevant documentation (click "AWS Management Console" tab and scroll down to the relevant description).
beantwortet vor 2 Jahren
Relevanter Inhalt
- AWS OFFICIALAktualisiert vor 3 Jahren
- AWS OFFICIALAktualisiert vor 2 Jahren
- AWS OFFICIALAktualisiert vor 2 Jahren
- AWS OFFICIALAktualisiert vor 2 Jahren
Thanks, that's helpful. So if I understand it right, this range is used for ClusterIP services which are only accessible to containers running in the cluster. Packets addressed to them are intercepted by iptables rules and redirected. That means that they never make it to an actual network interface which is why the addresses can and should be outside of the CIDR range used by the VPC.