.
Hi all, I’m having trouble reaching services advertised on k3s from external clients…
My setup is:
- Netmaker 0.14.5 via docker-compose, and netclients installed using apt.
- WireGuard subnet 10.70.0.0/20
- K3s/flannel installed on top of WireGuard mesh with 2 regions:
- Region 1: master A, workers C,D,E
- Region 2: master B, workers F,G,H
- Netmaker Ingress nodes are A, B, C
My issue is:
- I advertise a Loadbalancer service on worker C. Metallb(L2) gives it IP 10.70.15.1
- From nodes A-H, service S is reachable.
- From my external clients vpn’d to ingress A, B the service is not reachable.
- From external clients vpn’d to ingress C, the service is reachable.
Could someone point me in the right direction on where to look?