Connections to databases, Redis and MQ are converted via NAT to Node’s IP?

[xuchuan-666]

Asking for help? Comment out what you need so we can get more information to help you!

Cluster information:
Kubernetes version: 1.18.9
Installation method: kubeadm

I want to use service in pod to connect Externel Mysql but not use
in kubernetes i use calico i want to use service and endpoint to connect a externel mysql like this
apiVersion: v1
kind: Service
metadata:
name: mysql-test
spec:
clusterIP: None
ports:

port: 3306
apiVersion: v1
kind: Endpoints
metadata:
name: mysql-test
subsets:

addresses:
ip: 10.103.34.7
ports:
port: 3306
In hope that i can use clusterIp + port to connect Externel mysql in pod
Current Behavior
in cluster node or pod i can telnet clusterIp port this Service ,

telnet 10.103.34.7 3306
Trying 10.103.34.7…
Connected to 10.103.34.7.
Escape character is ‘^]’.
when I connect to the database, the authentication fails. But If I add the allowed nodeip node link to the database, the authentication is successful
Connections to databases, Redis and MQ are converted via NAT to Node’s IP?
Since POD’s node nodes are randomly scheduled, I don’t know how to add permission control to the database

[RA489]

/kind support

[prezha]

hey @xuchuan-666, thank you for opening the issue.

just to clarify, are you using minikube (eg, with 'none' driver), or just kubeadm?

thanks!

[spowelljr]

Hi @xuchuan-666, we haven't heard back from you, do you still have this issue?
There isn't enough information in this issue to make it actionable, and a long enough duration has passed, so this issue is likely difficult to replicate.

I will close this issue for now but feel free to reopen when you feel ready to provide more information.