GKE Troubleshooting

 Compute Instances 

----------------- 

 

Authentication issue when provisioning using ansible "gce" module

Issue:    You encounter any of this messages when using a credentials file.    gcp Required 'compute.zones.list' permission for ...    nGoogleBaseError: {u'locationType': u'header', u'domain': u'global', u'message': u'Invalid Credentials', u'reason': u'authError', u'location': u'Authorization'}\n"}    Resolution:    Try removing ~/.google_libcloud_auth.* and try running playbook again

 

Network 

------- 

 

Compute Instances can't access internet

- Check if they have external IPs  - Check if there are any firewalls blocking them

 

GKE 

--- 

 

Expired access token

You see the following message when trying to use kubectl.    unable to recognize "/app/kubernetes/manifests/prd/00-namespace.yml": Get https://35.234.149.27/api?timeout=32s: error executing access token command "/home/gitlab-runner/google-cloud-sdk/bin/gcloud config config-helper --format=json": err=fork/exec /home/gitlab-runner/google-cloud-sdk/bin/gcloud: no such file or directory output= stderr=

 

Load Balancing 

-------------- 

 

Debugging healthchecks

https://cloudplatform.googleblog.com/2015/07/Debugging-Health-Checks-in-Load-Balancing-on-Google-Compute-Engine.html