Hi,
In my K8s cluster, I have two nodes. And I created a deployment with only 1
replica and exposed it as a service, and then edited the service by
changing its type to NodePort, and then I found the kube-proxy in *both* of
the nodes listen on the node port, like:
sudo netstat -plan | grep 32650
tcp6 0 0 :::32650 :::* LISTEN
30018/kube-proxy
This is a bit confused to me. Why does the node which has no backend pod of
this service listen on the node port? I think we should only make the
kube-proxy on the node which has the only pod listen on the node port, in
this way, we can create pods on a set of nodes which have public IPs
with nodeSelector, and only expose the service from those nodes publicly.
--
You received this message because you are subscribed to the Google Groups
"Containers at Google" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To post to this group, send email to [email protected].
Visit this group at https://groups.google.com/group/google-containers.
For more options, visit https://groups.google.com/d/optout.
