I want rke2 to work in a public network environment. How do I set the parameters?

[DokiDoki1103]

I want rke2 to work in a public network environment. How do I set the parameters?

[DokiDoki1103]

I cannot start after specifying the node-ip parameter as the public IP address

[DokiDoki1103]

Mar 25 11:54:57 iZ0jl4d8y3fq0elt35wm7rZ rke2[25521]: {"level":"warn","ts":"2024-03-25T11:54:57.258748+0800","logger":"etcd-client","caller":"v3@v3.5.9-k3s1/retry_interceptor.go:62","msg":"retrying of unary invoker failed","target":"etcd-endpoints://0xc0008efc00/127.0.0.1:2379","attempt":0,"error":"rpc error: code = DeadlineExceeded desc = latest balancer error: last connection error: connection error: desc = \"transport: Error while dialing: dial tcp 127.0.0.1:2379: connect: connection refused\""}
Mar 25 11:54:57 iZ0jl4d8y3fq0elt35wm7rZ rke2[25521]: time="2024-03-25T11:54:57+08:00" level=error msg="Failed to check local etcd status for learner management: context deadline exceeded"
Mar 25 11:54:57 iZ0jl4d8y3fq0elt35wm7rZ rke2[25521]: time="2024-03-25T11:54:57+08:00" level=debug msg="Wrote ping"
Mar 25 11:54:57 iZ0jl4d8y3fq0elt35wm7rZ rke2[25521]: time="2024-03-25T11:54:57+08:00" level=info msg="Cluster-Http-Server 2024/03/25 11:54:57 http: TLS handshake error from 127.0.0.1:36488: remote error: tls: bad certificate"
Mar 25 11:54:57 iZ0jl4d8y3fq0elt35wm7rZ rke2[25521]: time="2024-03-25T11:54:57+08:00" level=info msg="Waiting to retrieve kube-proxy configuration; server is not ready: https://127.0.0.1:9345/v1-rke2/readyz: 500 Internal Server Error"
Mar 25 11:55:00 iZ0jl4d8y3fq0elt35wm7rZ rke2[25521]: time="2024-03-25T11:55:00+08:00" level=info msg="Cluster-Http-Server 2024/03/25 11:55:00 http: TLS handshake error from 8.147.131.81:35572: remote error: tls: bad certificate"
Mar 25 11:55:02 iZ0jl4d8y3fq0elt35wm7rZ rke2[25521]: time="2024-03-25T11:55:02+08:00" level=debug msg="Wrote ping"
Mar 25 11:55:02 iZ0jl4d8y3fq0elt35wm7rZ rke2[25521]: time="2024-03-25T11:55:02+08:00" level=info msg="Cluster-Http-Server 2024/03/25 11:55:02 http: TLS handshake error from 127.0.0.1:36550: remote error: tls: bad certificate"
Mar 25 11:55:02 iZ0jl4d8y3fq0elt35wm7rZ rke2[25521]: time="2024-03-25T11:55:02+08:00" level=info msg="Waiting to retrieve kube-proxy configuration; server is not ready: https://127.0.0.1:9345/v1-rke2/readyz: 500 Internal Server Error"
Mar 25 11:55:05 iZ0jl4d8y3fq0elt35wm7rZ rke2[25521]: time="2024-03-25T11:55:05+08:00" level=info msg="Cluster-Http-Server 2024/03/25 11:55:05 http: TLS handshake error from 8.147.131.81:36002: remote error: tls: bad certificate"
Mar 25 11:55:07 iZ0jl4d8y3fq0elt35wm7rZ rke2[25521]: time="2024-03-25T11:55:07+08:00" level=debug msg="Wrote ping"
Mar 25 11:55:07 iZ0jl4d8y3fq0elt35wm7rZ rke2[25521]: time="2024-03-25T11:55:07+08:00" level=info msg="Cluster-Http-Server 2024/03/25 11:55:07 http: TLS handshake error from 127.0.0.1:36606: remote error: tls: bad certificate"
Mar 25 11:55:07 iZ0jl4d8y3fq0elt35wm7rZ rke2[25521]: time="2024-03-25T11:55:07+08:00" level=info msg="Waiting to retrieve kube-proxy configuration; server is not ready: https://127.0.0.1:9345/v1-rke2/readyz: 500 Internal Server Error"
Mar 25 11:55:09 iZ0jl4d8y3fq0elt35wm7rZ rke2[25521]: {"level":"warn","ts":"2024-03-25T11:55:09.546216+0800","logger":"etcd-client","caller":"v3@v3.5.9-k3s1/retry_interceptor.go:62","msg":"retrying of unary invoker failed","target":"etcd-endpoints://0xc0008efc00/127.0.0.1:2379","attempt":0,"error":"rpc error: code = DeadlineExceeded desc = latest balancer error: last connection error: connection error: desc = \"transport: Error while dialing: dial tcp 127.0.0.1:2379: connect: connection refused\""}
Mar 25 11:55:09 iZ0jl4d8y3fq0elt35wm7rZ rke2[25521]: {"level":"info","ts":"2024-03-25T11:55:09.546305+0800","logger":"etcd-client","caller":"v3@v3.5.9-k3s1/client.go:210","msg":"Auto sync endpoints failed.","error":"context deadline exceeded"}
Mar 25 11:55:10 iZ0jl4d8y3fq0elt35wm7rZ rke2[25521]: time="2024-03-25T11:55:10+08:00" level=info msg="Cluster-Http-Server 2024/03/25 11:55:10 http: TLS handshake error from 8.147.131.81:36466: remote error: tls: bad certificate"
Mar 25 11:55:12 iZ0jl4d8y3fq0elt35wm7rZ rke2[25521]: {"level":"warn","ts":"2024-03-25T11:55:12.259001+0800","logger":"etcd-client","caller":"v3@v3.5.9-k3s1/retry_interceptor.go:62","msg":"retrying of unary invoker failed","target":"etcd-endpoints://0xc0008efc00/127.0.0.1:2379","attempt":0,"error":"rpc error: code = DeadlineExceeded desc = latest balancer error: last connection error: connection error: desc = \"transport: Error while dialing: dial tcp 127.0.0.1:2379: connect: connection refused\""}
Mar 25 11:55:12 iZ0jl4d8y3fq0elt35wm7rZ rke2[25521]: time="2024-03-25T11:55:12+08:00" level=error msg="Failed to check local etcd status for learner management: context deadline exceeded"
Mar 25 11:55:12 iZ0jl4d8y3fq0elt35wm7rZ rke2[25521]: time="2024-03-25T11:55:12+08:00" level=debug msg="Wrote ping"
Mar 25 11:55:12 iZ0jl4d8y3fq0elt35wm7rZ rke2[25521]: time="2024-03-25T11:55:12+08:00" level=info msg="Cluster-Http-Server 2024/03/25 11:55:12 http: TLS handshake error from 127.0.0.1:36668: remote error: tls: bad certificate"
Mar 25 11:55:12 iZ0jl4d8y3fq0elt35wm7rZ rke2[25521]: time="2024-03-25T11:55:12+08:00" level=info msg="Waiting to retrieve kube-proxy configuration; server is not ready: https://127.0.0.1:9345/v1-rke2/readyz: 500 Internal Server Error"
Mar 25 11:55:16 iZ0jl4d8y3fq0elt35wm7rZ rke2[25521]: time="2024-03-25T11:55:16+08:00" level=info msg="Cluster-Http-Server 2024/03/25 11:55:16 http: TLS handshake error from 8.147.131.81:36988: remote error: tls: bad certificate"
Mar 25 11:55:17 iZ0jl4d8y3fq0elt35wm7rZ rke2[25521]: time="2024-03-25T11:55:17+08:00" level=debug msg="Wrote ping"
Mar 25 11:55:17 iZ0jl4d8y3fq0elt35wm7rZ rke2[25521]: time="2024-03-25T11:55:17+08:00" level=info msg="Cluster-Http-Server 2024/03/25 11:55:17 http: TLS handshake error from 127.0.0.1:36726: remote error: tls: bad certificate"
Mar 25 11:55:17 iZ0jl4d8y3fq0elt35wm7rZ rke2[25521]: time="2024-03-25T11:55:17+08:00" level=info msg="Waiting to retrieve kube-proxy configuration; server is not ready: https://127.0.0.1:9345/v1-rke2/readyz: 500 Internal Server Error"
Mar 25 11:55:21 iZ0jl4d8y3fq0elt35wm7rZ rke2[25521]: time="2024-03-25T11:55:21+08:00" level=info msg="Cluster-Http-Server 2024/03/25 11:55:21 http: TLS handshake error from 8.147.131.81:37434: remote error: tls: bad certificate"
Mar 25 11:55:22 iZ0jl4d8y3fq0elt35wm7rZ rke2[25521]: time="2024-03-25T11:55:22+08:00" level=debug msg="Wrote ping"
Mar 25 11:55:22 iZ0jl4d8y3fq0elt35wm7rZ rke2[25521]: time="2024-03-25T11:55:22+08:00" level=info msg="Cluster-Http-Server 2024/03/25 11:55:22 http: TLS handshake error from 127.0.0.1:36778: remote error: tls: bad certificate"
Mar 25 11:55:22 iZ0jl4d8y3fq0elt35wm7rZ rke2[25521]: time="2024-03-25T11:55:22+08:00" level=info msg="Waiting to retrieve kube-proxy configuration; server is not ready: https://127.0.0.1:9345/v1-rke2/readyz: 500 Internal Server Error"
Mar 25 11:55:24 iZ0jl4d8y3fq0elt35wm7rZ rke2[25521]: {"level":"warn","ts":"2024-03-25T11:55:24.547549+0800","logger":"etcd-client","caller":"v3@v3.5.9-k3s1/retry_interceptor.go:62","msg":"retrying of unary invoker failed","target":"etcd-endpoints://0xc0008efc00/127.0.0.1:2379","attempt":0,"error":"rpc error: code = DeadlineExceeded desc = latest balancer error: last connection error: connection error: desc = \"transport: Error while dialing: dial tcp 127.0.0.1:2379: connect: connection refused\""}
Mar 25 11:55:24 iZ0jl4d8y3fq0elt35wm7rZ rke2[25521]: {"level":"info","ts":"2024-03-25T11:55:24.547624+0800","logger":"etcd-client","caller":"v3@v3.5.9-k3s1/client.go:210","msg":"Auto sync endpoints failed.","error":"context deadline exceeded"}
Mar 25 11:55:24 iZ0jl4d8y3fq0elt35wm7rZ rke2[25521]: time="2024-03-25T11:55:24+08:00" level=info msg="Waiting for etcd server to become available"
Mar 25 11:55:24 iZ0jl4d8y3fq0elt35wm7rZ rke2[25521]: time="2024-03-25T11:55:24+08:00" level=info msg="Waiting for API server to become available"
Mar 25 11:55:26 iZ0jl4d8y3fq0elt35wm7rZ rke2[25521]: time="2024-03-25T11:55:26+08:00" level=info msg="Cluster-Http-Server 2024/03/25 11:55:26 http: TLS handshake error from 8.147.131.81:37928: remote error: tls: bad certificate"
Mar 25 11:55:27 iZ0jl4d8y3fq0elt35wm7rZ rke2[25521]: {"level":"warn","ts":"2024-03-25T11:55:27.25917+0800","logger":"etcd-client","caller":"v3@v3.5.9-k3s1/retry_interceptor.go:62","msg":"retrying of unary invoker failed","target":"etcd-endpoints://0xc0008efc00/127.0.0.1:2379","attempt":0,"error":"rpc error: code = DeadlineExceeded desc = latest balancer error: last connection error: connection error: desc = \"transport: Error while dialing: dial tcp 127.0.0.1:2379: connect: connection refused\""}
Mar 25 11:55:27 iZ0jl4d8y3fq0elt35wm7rZ rke2[25521]: time="2024-03-25T11:55:27+08:00" level=error msg="Failed to check local etcd status for learner management: context deadline exceeded"
Mar 25 11:55:27 iZ0jl4d8y3fq0elt35wm7rZ rke2[25521]: time="2024-03-25T11:55:27+08:00" level=info msg="Removed kube-proxy static pod manifest"
Mar 25 11:55:27 iZ0jl4d8y3fq0elt35wm7rZ rke2[25521]: time="2024-03-25T11:55:27+08:00" level=debug msg="Wrote ping"
Mar 25 11:55:27 iZ0jl4d8y3fq0elt35wm7rZ rke2[25521]: time="2024-03-25T11:55:27+08:00" level=info msg="Cluster-Http-Server 2024/03/25 11:55:27 http: TLS handshake error from 127.0.0.1:36832: remote error: tls: bad certificate"
Mar 25 11:55:27 iZ0jl4d8y3fq0elt35wm7rZ rke2[25521]: time="2024-03-25T11:55:27+08:00" level=info msg="Waiting to retrieve kube-proxy configuration; server is not ready: https://127.0.0.1:9345/v1-rke2/readyz: 500 Internal Server Error"
Mar 25 11:55:29 iZ0jl4d8y3fq0elt35wm7rZ rke2[25521]: {"level":"warn","ts":"2024-03-25T11:55:29.547782+0800","logger":"etcd-client","caller":"v3@v3.5.9-k3s1/retry_interceptor.go:62","msg":"retrying of unary invoker failed","target":"etcd-endpoints://0xc0008efc00/127.0.0.1:2379","attempt":0,"error":"rpc error: code = DeadlineExceeded desc = latest balancer error: last connection error: connection error: desc = \"transport: Error while dialing: dial tcp 127.0.0.1:2379: connect: connection refused\""}
Mar 25 11:55:29 iZ0jl4d8y3fq0elt35wm7rZ rke2[25521]: time="2024-03-25T11:55:29+08:00" level=info msg="Failed to test data store connection: context deadline exceeded"
Mar 25 11:55:31 iZ0jl4d8y3fq0elt35wm7rZ rke2[25521]: time="2024-03-25T11:55:31+08:00" level=info msg="Cluster-Http-Server 2024/03/25 11:55:31 http: TLS handshake error from 8.147.131.81:38382: remote error: tls: bad certificate"
Mar 25 11:55:32 iZ0jl4d8y3fq0elt35wm7rZ rke2[25521]: time="2024-03-25T11:55:32+08:00" level=debug msg="Wrote ping"
Mar 25 11:55:32 iZ0jl4d8y3fq0elt35wm7rZ rke2[25521]: time="2024-03-25T11:55:32+08:00" level=info msg="Cluster-Http-Server 2024/03/25 11:55:32 http: TLS handshake error from 127.0.0.1:36892: remote error: tls: bad certificate"
Mar 25 11:55:32 iZ0jl4d8y3fq0elt35wm7rZ rke2[25521]: time="2024-03-25T11:55:32+08:00" level=info msg="Waiting to retrieve kube-proxy configuration; server is not ready: https://127.0.0.1:9345/v1-rke2/readyz: 500 Internal Server Error"
Mar 25 11:55:36 iZ0jl4d8y3fq0elt35wm7rZ rke2[25521]: time="2024-03-25T11:55:36+08:00" level=info msg="Cluster-Http-Server 2024/03/25 11:55:36 http: TLS handshake error from 8.147.131.81:38860: remote error: tls: bad certificate"
Mar 25 11:55:37 iZ0jl4d8y3fq0elt35wm7rZ rke2[25521]: time="2024-03-25T11:55:37+08:00" level=debug msg="Wrote ping"
Mar 25 11:55:37 iZ0jl4d8y3fq0elt35wm7rZ rke2[25521]: time="2024-03-25T11:55:37+08:00" level=info msg="Cluster-Http-Server 2024/03/25 11:55:37 http: TLS handshake error from 127.0.0.1:36954: remote error: tls: bad certificate"
Mar 25 11:55:37 iZ0jl4d8y3fq0elt35wm7rZ rke2[25521]: time="2024-03-25T11:55:37+08:00" level=info msg="Waiting to retrieve kube-proxy configuration; server is not ready: https://127.0.0.1:9345/v1-rke2/readyz: 500 Internal Server Error"

[manuelbuil]

Can you describe your env? Are your nodes behind a NAT with a public IP or is the public IP the IP of one of your interfaces?

[caroline-suse-rancher]

I'm going to convert this to a discussion since this isn't a bug, enhancement, or feature request :)