Lab 11.2. Ingress Controller error when creating ingress

eboyko

Hi

I receive an error when creating ingress:

kubectl create -f ingress.yaml

Error from server (InternalError): error when creating "ingress.yaml": Internal error occurred: failed calling webhook "validate.nginx.ingress.kubernetes.io": failed to call webhook: Post "https://myingress-ingress-nginx-controller-admission.default.svc:443/networking/v1/ingresses?timeout=10s": notresolvable

How to resolve this?

chrispokorni

Hi @eboyko,

On the earlier steps, when installing the nginx ingress controller, what are the outputs of the commands in step 6 (the get services and get pod).

Regards,
-Chris

eboyko

Hi @chrispokorni,

kubectl --namespace default get services -o wide myingress-ingress-nginx-controller

NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE SELECTOR
myingress-ingress-nginx-controller LoadBalancer 10.100.239.22 80:30996/TCP,443:32527/TCP 2d18h app.kubernetes.io/component=controller,app.kubernetes.io/instance=myingress,app.kubernetes.io/name=ingress-nginx

kubectl get pod --all-namespaces |grep nginx
accounting nginx-one-76d8b856cc-v554x 1/1 Running 0 3d15h
accounting nginx-one-76d8b856cc-zshrw 1/1 Running 0 3d15h
default myingress-ingress-nginx-controller-dqn4z 1/1 Running 0 2d18h
default myingress-ingress-nginx-controller-skl6l 1/1 Running 0 2d18h
default nginx-7854ff8877-xtng9 1/1 Running 0 4d17h

chrispokorni

Hi @eboyko,

Such a timeout indicates a firewall rule that blocks traffic to a required port number.

Regards,
-Chris

eboyko

Hi, @chrispokorni,

I managed to solve this issue by adding .svc to no_proxy in /etc/kubernetes/manifests/kube-apiserver.yaml.

Thank you!

don.perkins

I have the same issue, but not clear how to resolve this per Eboyko's comment. Do I need to open a port on the control plane node?

chrispokorni

Hi @don.perkins,

Is your cluster running behind a proxy as well?

Regards,
-Chris

don.perkins

I can see linkerd and nginx in the list of services, from previous labs. Should I delete those deployments?

don.perkins

actually, the nginx is part of the current lab I am in: 11.2

don.perkins

How can I determine if my cluster is running behind a proxy? I am using the lab instructions for Google Cloud.

chrispokorni

Hi @don.perkins,

If you closely followed the provisioning video guide for GCP and the lab guide to install and configure the environment, you should not be running behind a proxy. This assumes you did not configure one yourself.

Regards,
-Chris

don.perkins

and I did follow the guide.