Skip to content

Document working with private clusters #14

Description

@eitah

TL;DR

We want to be able to use the deploy action to get connected to our private cluster, so we've set up a GSA with the right permissions but are stumped by firewall issues.

Detailed design

Seems like the deploy job has some amount of access to be able to get cluster details as suggested might be the case from the docs, but then hits some kind of firewall or private connectivity issue where the calls to the Kubernetes api are getting blocked.

Error: failed to apply deployment: failed to check if deployed object with kind "Namespace" and name "deployment" exists: failed to get config of deployed object: command to get kubernetes config: E1226 18:51:18.798792      24 memcache.go:265] couldn't get current server API group list: Get "https://10.3.0.50/api?timeout=32s": dial tcp 10.3.0.50:443: i/o timeout
E1226 18:51:48.801921      24 memcache.go:265] couldn't get current server API group list: Get "https://10.3.0.50/api?timeout=32s": dial tcp 10.3.0.50:443: i/o timeout

Additional information

Where's the source code for gke-deploy [command]? Perhaps I could come to understand what CLI commands are running to debug the issue locally. Perhaps per the readme it's here? https://github.com/GoogleCloudPlatform/cloud-builders/tree/master/gke-deploy. Thanks!

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or request

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions