Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

cluster-agent network policy breaks cluster-name autodiscovery on GKE #1373

Open
hanikesn opened this issue Apr 15, 2024 · 0 comments
Open

Comments

@hanikesn
Copy link

Describe what happened:

CLUSTER | DEBUG | (pkg/util/kubernetes/clustername/clustername.go:97 in getClusterName) | Unable to auto discover the cluster name from the gce API: unable to retrieve clustername from GCE: GCE metadata API error: Get "http://169.254.169.254/computeMetadata/v1/instance/attributes/cluster-name": context deadline exceeded (Client.Timeout exceeded while awaiting headers)

The egress to port 80 is blocked here:

- # Egress to
# * Datadog intake
# * Kube API server
# * DNS
ports:
- port: 443
- port: 6443
- port: 53
protocol: UDP

Describe what you expected:

CLUSTER | DEBUG | (pkg/util/kubernetes/clustername/clustername.go:94 in getClusterName) | Trying to auto discover the cluster name from the gce API...
CLUSTER | DEBUG | (pkg/config/setup/config.go:2010 in IsCloudProviderEnabled) | cloud_provider_metadata is set to [gcp] in agent configuration, trying endpoints for GCP Cloud Provider
CLUSTER | DEBUG | (pkg/util/http/transport.go:135 in 1) | URL 'http://169.254.169.254/computeMetadata/v1/instance/attributes/cluster-name' matches no_proxy list item '169.254.169.254': not using any proxy
CLUSTER | INFO | (pkg/util/kubernetes/clustername/clustername.go:104 in getClusterName) | Using cluster name XXX auto discovered from the gce API

Steps to reproduce the issue:

  datadog:
    networkPolicy:
      create: true

Additional environment details (Operating System, Cloud provider, etc):
Chart version: 3.59.6
Agent version 7.52.1

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant