Closed bvrxs2yyw9fq49n5 closed 2 weeks ago
same problem here
I found this post https://github.com/kubernetes-sigs/apiserver-network-proxy/issues/588#issuecomment-2000453097 that suggests—from what I understand—these port are used by Node problem detector and Prometheus node-exporter if you deploy Prometheus and Container insights (?) addons via AKS. I have not confirmed it yet, but might try installing aforementioned addons to confirm it
check this out https://learn.microsoft.com/en-us/azure/architecture/operator-guides/aks/aks-triage-node-health "When an AKS cluster is set up with an API server virtual network integration and either an Azure container networking interface (CNI) or an Azure CNI with dynamic pod IP assignment, there's no need to deploy Konnectivity agents. The integrated API server pods can establish direct communication with the cluster worker nodes via private networking."
This issue has been automatically marked as stale because it has not had any activity for 21 days. It will be closed if no further activity occurs within 7 days of this comment.
This issue will now be closed because it hasn't had any activity for 7 days after stale. bvrxs2yyw9fq49n5 feel free to comment again on the next 7 days to reopen or open a new issue after that time if you still have a question/issue or suggestion.
Hi all!
I created a
1.28.10
cluster. VNet is10.1.0.0/16
, network plugin is Azure with Overlay mode. Outbound type isuserAssignedNATGateway
, created NAT Gateway and assigned a route table to AKS node pool's subnet. Pod CIDR is192.168.0.0/16. Default node pool launches nodes in subnet
10.1.0.0/24`.Everything seems to be working fine. I set up ingress, I can run my workloads, they are accessible, the thing that worries me is amount of log messages that konnectivity-agent pods generate. They seem to start fine:
and the I see a bunch of errors:
and they repeat on and on and on. I checked the only security group there (it was created automatically in node pool resource group) and it does not seem to block anything https://imgur.com/a/oKJ3wVf
What feels weird to me is that everything seems to be working fine. I can do all konnectivity-service dependant things (logs, exec) without any problems.
Any ideas?