Closed vizeit closed 1 year ago
Have you configured singleuser.networkPolicy.egressAllowRules.cloudMetadataServer
and disabled singleuser.cloudMetadata.blockWithIptables
?
https://z2jh.jupyter.org/en/stable/resources/reference.html#singleuser-networkpolicy-egressallowrules-cloudmetadataserver ?
If that's not working please fill in all the information requested in the issue template, especially your full configuration
Please find the full template with supplied configuration
singleuser:
cloudMetadata:
blockWithIptables: false
extraAnnotations:
gke-gcsfuse/volumes: "true"
storage:
extraVolumeMounts:
- mountPath: /home/jovyan/shared
name: shareddata
extraVolumes:
- name: shareddata
persistentVolumeClaim:
claimName: shared-bucket-pvc
This is not an issue. I added the following entry and it worked
singleuser:
networkPolicy:
egressAllowRules:
cloudMetadataServer: true
I have described detailed steps in my post if anyone wants to fully setup GCS bucket as a shared drive with zero-to-jupyterhub
Bug description
Google Cloud Storage bucket can be mounted as a drive using GCS FUSE CSI driver. When a bucket is configured as a shared drive for the single user pods, the pod fails to start. Upon detailed investigation at my end, I see that current network policy for single user egress only allows to reach Google meta server IP 169.254.169.254 on port 53 but GCS FUSE CSI driver requires egress to the meta server IP on port 80. I am including the deny policy from the GCP logs here
The workaround is to add network policy to allow port 80 for the GCP meta server IP 169.254.169.254
Reference: Network policies were discussed earlier for my other issue 3167
NOTE: I have searched on Jupyter community forum for similar issues and did not find any relevant to this behavior
How to reproduce
Expected behaviour
Single user pod should start successfully
Actual behaviour
Single user pod fails to start
Your personal set up
Helm chart version: 3.1.0
Full environment
``` # paste output of `pip freeze` or `conda list` here ```Configuration
```python # jupyterhub_config.py ```Logs