[TOC] 前提條件： - KUBERNETES 集群已安裝 - calico 網絡插件已安裝 - calicoctl 工具已安裝，參考 [文章](./calicoctl_install.md) ## 判斷現有環境模式 ```shell $ ip r # 路由轉發網卡是物理網卡的話，則為BGP模式，轉發網卡是tunl0的話，則為IPIP $ calicoctl get ippool -owide # IPIPMODE字段為Never，則為BGP模式，IPIPMODE字段為Always，則為IPIP ``` ## 檢查環境 ```shell # 查看主機路由(ps: 路由轉發的網卡) $ ip r | grep /26 blackhole 172.26.37.128/26 proto bird 172.26.110.128/26 via 192.168.32.129 dev ens33 proto bird onlink 172.26.143.0/26 via 192.168.32.128 dev ens33 proto bird onlink # 查看ipPool現有配置(ps: IPIPMODE字段) $ calicoctl get ippool -owide NAME CIDR NAT IPIPMODE VXLANMODE DISABLED DISABLEBGPEXPORT SELECTOR default-ipv4-ippool 172.26.0.0/16 true Never Never false false all() # 查看calico-node配置 $ kubectl -n kube-system get daemonset calico-node -oyaml | grep -A1 CALICO_IPV4POOL_IPIP$ - name: CALICO_IPV4POOL_IPIP value: Never ``` ## 修改ipPool配置 ```shell $ calicoctl get ippool default-ipv4-ippool -oyaml > default-ipv4-ippool.yaml $ calicoctl patch ippool default-ipv4-ippool --patch '{"spec":{"ipipMode": "Always"}}' ``` ## 修改calico-node配置 ```shell $ kubectl -n kube-system get daemonset calico-node -oyaml > calico-node.yaml $ kubectl -n kube-system patch daemonset calico-node --patch '{"spec": {"template": {"spec": {"containers": [{"name":"calico-node", "env": [{"name": "CALICO_IPV4POOL_IPIP", "value": "Always"}]}]}}}}' ``` ## 查看滾動更新狀態 ```shell $ kubectl -n kube-system rollout status daemonset calico-node ``` ## 驗證 ```shell # 查看主機路由(ps: 路由轉發的網卡) $ ip r | grep /26 # 查看ipPool現有配置(ps: IPIPMODE字段) $ calicoctl get ippool -owide # 查看calico-node配置 $ kubectl -n kube-system get daemonset calico-node -oyaml | grep -A1 CALICO_IPV4POOL_IPIP$ ``` ## 重啟所有容器(可選) > 有些環境不需要執行 ```shell $ kubectl delete pod --all --all-namespaces ```