Check for duplicate or overlapping routes in the cloud console?
On Jul 2, 2017 9:14 AM, "Itamar O" <itamar...@gmail.com> wrote:
> Hi,
> I'm investigating a weird routing behavior on our production GKE cluster
> (nodes & master running 1.6.6), not quite sure how to proceed at this point.
>
> The essence of the issue: containers on the GKE cluster can communicate
> with *some* GCE instances, but *not others*, and there's no (apparent)
> difference between the accessible and inaccessible GCE instances.
>
> More details:
> All GCE instances and GKE clusters co-exist happily within 10.240.*.*
> Pods on the GKE cluster are assigned addresses in the 10.44.*.* space.
> I noticed one of the services on GKE misbehaving, and the logs indicated
> that it is timing out on accessing a service that we have serving from a
> GCE instance (at 10.240.0.2 for that matter).
> I `kubectl exec` into a bash session in that pod, and indeed I saw that
> `ping 10.240.0.2` is timing out, but `ping 10.240.0.35` is working just
> fine (10.240.0.35 being another GCE machine, being 100% equivalent to
> 10.240.0.2 AFAIK).
> We also have another, older, GKE cluster up ("previous prod"), from which
> I tried the same pings with no such issues. The differences I can map
> include the previous cluster running k8s 1.6.2, and pods assigned under
> 10.88.*.*.
> I could not notice any meaningful related rule in GCE Routing or FW (they
> seem to be equivalent between the old and new GKE clusters).
>
> Any ideas on how to proceed with investigating this?
>
> --
> You received this message because you are subscribed to the Google Groups
> "Kubernetes user discussion and Q&A" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to kubernetes-users+unsubscr...@googlegroups.com.
> To post to this group, send email to kubernetes-users@googlegroups.com.
> Visit this group at https://groups.google.com/group/kubernetes-users.
> For more options, visit https://groups.google.com/d/optout.
>
--
You received this message because you are subscribed to the Google Groups
"Kubernetes user discussion and Q&A" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to kubernetes-users+unsubscr...@googlegroups.com.
To post to this group, send email to kubernetes-users@googlegroups.com.
Visit this group at https://groups.google.com/group/kubernetes-users.
For more options, visit https://groups.google.com/d/optout.
