Opensearch 服务无法访问 NGINX Ingress 后面的 EKS 集群上的应用程序服务

Question

我正在尝试在 EKS 上的 NGINX 入口后面设置我的应用程序和 opensearch 应用程序，如下所示。

在 NGINX Ingress 上，我设置了如下路由，该路由工作正常：

    ---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: ingress-opensearch
  namespace: os-dev
  annotations:
    nginx.ingress.kubernetes.io/backend-protocol: "HTTPS"
    nginx.ingress.kubernetes.io/rewrite-target: /$2

spec:
  ingressClassName: nginx
  tls:
  - hosts:
    - acdfdd7b4bsdfe3ed1ae568bc892743e5-022f05b723bf7c62.elb.us-east-2.amazonaws.com
    secretName: tls-for-dashboards-key-pair
  rules:
  - host: acdfdd7b4bsdfe3ed1ae568bc892743e5-022f05b723bf7c62.elb.us-east-2.amazonaws.com
    http:
      paths:
      - path: /os(/|$)(.*)
        pathType: Prefix
        backend:
          service:
             name: opensearch-cluster-master
             port:
               number: 9200

上面的路由在浏览器中使用 https://acdfdd7b4bsdfe3ed1ae568bc892743e5-022f05b723bf7c62.elb.us-east-2.amazonaws.com/os。

服务状态显示一切看起来都很好：

NAMESPACE      NAME                                     TYPE           CLUSTER-IP       EXTERNAL-IP                                                                     PORT(S)                      AGE
cert-manager   cert-manager                             ClusterIP      10.100.230.233   <none>                                                                          9402/TCP                     6d8h
cert-manager   cert-manager-webhook                     ClusterIP      10.100.240.163   <none>                                                                          443/TCP                      6d8h
default        kubernetes                               ClusterIP      10.100.0.1       <none>                                                                          443/TCP                      6d11h
ingress        ing-ingress-nginx-controller             LoadBalancer   10.100.69.69     acdfdd7b4bsdfe3ed1ae568bc892743e5-022f05b723bf7c62.elb.us-east-2.amazonaws.com   80:30947/TCP,443:32576/TCP   6d
ingress        ing-ingress-nginx-controller-admission   ClusterIP      10.100.211.227   <none>                                                                          443/TCP                      6d
kube-system    kube-dns                                 ClusterIP      10.100.0.10      <none>                                                                          53/UDP,53/TCP                6d11h
os-dev         dashboards-opensearch-dashboards         ClusterIP      10.100.85.97     <none>                                                                          5601/TCP                     5d5h
os-dev         opensearch-cluster-master                ClusterIP      10.100.245.3     <none>                                                                          9200/TCP,9300/TCP            5d5h
os-dev         opensearch-cluster-master-headless       ClusterIP      None             <none>                                                                          9200/TCP,9300/TCP            5d5h

在应用程序端，每当 OpenSearch 端点指定为 opensearch-cluster-master:9200 时，应用程序就无法连接。

但是，当我从容器测试对 OpenSearch 容器执行 ping 操作时，ping 工作正常，但 telnet 到端口失败。

对此的任何线索都非常感激。

Pod 状态：

[root@ip-172-31-24-175 matilda_deployment]# kubectl get pods -A
NAMESPACE      NAME                                                READY   STATUS             RESTARTS   AGE
cert-manager   cert-manager-847544bbd-xbbnj                        1/1     Running            0          6d8h
cert-manager   cert-manager-cainjector-5c747645bf-s4x7k            1/1     Running            0          6d8h
cert-manager   cert-manager-webhook-f588b48b8-rlhq4                1/1     Running            0          6d8h
ingress        ing-ingress-nginx-controller-64b96466c4-lgz4q       1/1     Running            0          6d
kube-system    aws-node-jgz25                                      1/1     Running            0          6d10h
kube-system    aws-node-vf6bl                                      1/1     Running            0          6d10h
kube-system    coredns-f47955f89-9kl8d                             1/1     Running            0          6d11h
kube-system    coredns-f47955f89-jr5xf                             1/1     Running            0          6d11h
kube-system    kube-proxy-krlrh                                    1/1     Running            0          6d10h
kube-system    kube-proxy-mmlkc                                    1/1     Running            0          6d10h
os-dev         app-6c498bd64c-z9hn7                               0/1     CrashLoopBackOff   31         139m
os-dev         dashboards-opensearch-dashboards-655fc6ff46-6gfm4   1/1     Running            0          5d5h
os-dev         opensearch-cluster-master-0                         1/1     Running            0          5d6h
os-dev         opensearch-cluster-master-1                         1/1     Running            0          5d6h
os-dev         opensearch-cluster-master-2                         1/1     Running            0          5d6h
 

提前谢谢您。

[更新]：此问题更具体于应用程序，其中证书是使用错误的域生成的。因此关闭该问题。