Application gateway 502 Bad gateway

[balakrishna222111]

502 Bad Gateway for application gateway

• I followed the below article to create application-gateway and add to existing aks cluster https://docs.microsoft.com/en-us/azure/application-gateway/tutorial-ingress-controller-add-on-existing
• When i tried to the hit the application gateway url from browser am facing this 502 Bad Gateway for application gateway due to backend health pools are

Backend pools unhealthy

502 Bad Gateway

I have aks cluster to that i enabled azure appication gateway .

To Reproduce Steps to reproduce the behavior:

Ingress Controller details

• -- App Gwy config -- "ingress-for-aks-cluster-id": "/subscriptions/59ca05bf-fea0-4e8b-806a-6c0161510fbd/resourcegroups/autoscheduler.ai-test/providers/Microsoft.ContainerService/managedClusters/autoscheduler-aks-test-01", -- App Gwy config -- "managed-by-k8s-ingress": "1.4.0/0e9dc17c/2021-02-26-03:29T+0000" -- App Gwy config -- } -- App Gwy config --} I0619 09:50:18.660268 1 mutate_app_gateway.go:177] BEGIN AppGateway deployment I0619 09:50:19.131062 1 client.go:201] OperationID='27aed83b-f78a-49f1-a97a-63bb854b25ed' I0619 09:50:36.446870 1 mutate_app_gateway.go:185] Applied generated Application Gateway configuration I0619 09:50:36.446905 1 mutate_app_gateway.go:200] cache: Updated with latest applied config. I0619 09:50:36.448271 1 mutate_app_gateway.go:204] END AppGateway deployment I0619 09:50:36.448303 1 controller.go:151] Completed last event loop run in: 18.107915155s

[akshaysngupta]

@balakrishna222111 I checked your cluster metadata and see that you are using kubenet network plugin with AKS. When using kubenet, you also need to assign AKS route table to AppGW subnet. This route table is required to setup connectivity b/w AppGW and AKS. Follow this document for steps on how to add the route table. https://github.com/Azure/application-gateway-kubernetes-ingress/blob/master/docs/how-tos/networking.md#with-kubenet

If this doesn't help, please feel free to create a support ticket.

[balakrishna222111]

@akshaysngupta i tried below code but my aks and appgw are in 2 diff resource group so i couldn't able add route . Is there other solution ?

Executed belows command

` aksClusterName="" aksResourceGroup="" appGatewayName="" appGatewayResourceGroup=""

find route table used by aks cluster

nodeResourceGroup=$(az aks show -n $aksClusterName -g $aksResourceGroup -o tsv --query "nodeResourceGroup") routeTableId=$(az network route-table list -g $nodeResourceGroup --query "[].id | [0]" -o tsv)

get the application gateway's subnet

appGatewaySubnetId=$(az network application-gateway show -n $appGatewayName -g $appGatewayResourceGroup -o tsv --query "gatewayIpConfigurations[0].subnet.id")

associate the route table to Application Gateway's subnet

az network vnet subnet update \ --ids $appGatewaySubnetId --route-table $routeTableId `

Output

[balakrishna222111]

@akshaysngupta is there any update ?

[balakrishna222111]

@akshaysngupta I have one query

• Assume that my appgw domain is "https://appgw.com" which is working fine . whenever i send request from browser like this https://appgw.com/aks it should internally re-direct to "https://appgw.com" but in the browser we should able to see like this https://appgw.com/aks is this feature enabled or can we do like this .

[akshaysngupta]

@akshaysngupta I have one query

• Assume that my appgw domain is "https://appgw.com" which is working fine . whenever i send request from browser like this https://appgw.com/aks it should internally re-direct to "https://appgw.com" but in the browser we should able to see like this https://appgw.com/aks is this feature enabled or can we do like this .

Try using https://github.com/Azure/application-gateway-kubernetes-ingress/blob/master/docs/annotations.md#backend-path-prefix

[akshaysngupta]

@akshaysngupta i tried below code but my aks and appgw are in 2 diff resource group so i couldn't able add route . Is there other solution ?

Executed belows command

` aksClusterName="" aksResourceGroup="" appGatewayName="" appGatewayResourceGroup=""

find route table used by aks cluster

nodeResourceGroup=$(az aks show -n $aksClusterName -g $aksResourceGroup -o tsv --query "nodeResourceGroup") routeTableId=$(az network route-table list -g $nodeResourceGroup --query "[].id | [0]" -o tsv)

get the application gateway's subnet

appGatewaySubnetId=$(az network application-gateway show -n $appGatewayName -g $appGatewayResourceGroup -o tsv --query "gatewayIpConfigurations[0].subnet.id")

associate the route table to Application Gateway's subnet

az network vnet subnet update --ids $appGatewaySubnetId --route-table $routeTableId `

Output

You can also assign the route table using portal. Navigate to Application Gateway subnet and select the route table used by your AKS cluster.

[henryzhan2020]

@akshaysngupta the query in the doc has some issue. need to remove the "0" from it.

get the application gateway's subnet

appGatewaySubnetId=$(az network application-gateway show -n $appGatewayName -g $appGatewayResourceGroup -o tsv --query "gatewayIpConfigurations[].subnet.id")

[Ramkumartherk]

Have you resolved this issue