configure-rp-filter.sh on GKE - bad netshoot-hostmount name
25 views
Skip to first unread message
Shannon McFarland
Feb 4, 2022, 9:32:25 AM2/4/22
to submariner-users
Hello,
On a new GKE cluster (1.21.6-gke.1500), I get errors when I run configure-rp-filter.sh per the instructions here: https://submariner.io/getting-started/quickstart/managed-kubernetes/gke/
Repetitive errors come up regarding the pod metadata.name:
./configure-rp-filter.sh
List of nodes in the cluster: gke-cluster-a-default-pool-9ea40efb-cg3t gke-cluster-a-default-pool-9ea40efb-dfjw gke-cluster-a-default-pool-9ea40efb-s5bx
Updating rp_filter to loose mode(2) on Node: gke-cluster-a-default-pool-9ea40efb-cg3t
I0204 09:19:02.642423 44659 gcp.go:122] WARNING: the gcp auth plugin is deprecated in v1.22+, unavailable in v1.25+; use gcloud instead.
To learn more, consult https://kubernetes.io/docs/reference/access-authn-authz/authentication/#client-go-credential-plugins
The Pod "netshoot-hostmount-D2E714B0-2285-45C5-B1D7-881F12783C8F" is invalid: metadata.name: Invalid value: "netshoot-hostmount-D2E714B0-2285-45C5-B1D7-881F12783C8F": a lowercase RFC 1123 subdomain must consist of lower case alphanumeric characters, '-' or '.', and must start and end with an alphanumeric character (e.g. 'example.com', regex used for validation is '[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*')
Updating rp_filter to loose mode(2) on Node: gke-cluster-a-default-pool-9ea40efb-dfjw
I0204 09:19:03.136523 44662 gcp.go:122] WARNING: the gcp auth plugin is deprecated in v1.22+, unavailable in v1.25+; use gcloud instead.
To learn more, consult https://kubernetes.io/docs/reference/access-authn-authz/authentication/#client-go-credential-plugins
The Pod "netshoot-hostmount-46C1A9FD-A371-41D3-9E98-0FBA8F3976CE" is invalid: metadata.name: Invalid value: "netshoot-hostmount-46C1A9FD-A371-41D3-9E98-0FBA8F3976CE": a lowercase RFC 1123 subdomain must consist of lower case alphanumeric characters, '-' or '.', and must start and end with an alphanumeric character (e.g. 'example.com', regex used for validation is '[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*')
Updating rp_filter to loose mode(2) on Node: gke-cluster-a-default-pool-9ea40efb-s5bx
I0204 09:19:03.491250 44665 gcp.go:122] WARNING: the gcp auth plugin is deprecated in v1.22+, unavailable in v1.25+; use gcloud instead.
To learn more, consult https://kubernetes.io/docs/reference/access-authn-authz/authentication/#client-go-credential-plugins
The Pod "netshoot-hostmount-E8CFEAE1-C825-405D-88E5-C4F21209EA47" is invalid: metadata.name: Invalid value: "netshoot-hostmount-E8CFEAE1-C825-405D-88E5-C4F21209EA47": a lowercase RFC 1123 subdomain must consist of lower case alphanumeric characters, '-' or '.', and must start and end with an alphanumeric character (e.g. 'example.com', regex used for validation is '[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*')
Updating rp_filter to loose mode(2) on Node: gke-cluster-a-default-pool-9ea40efb-cg3t
I0204 09:19:02.642423 44659 gcp.go:122] WARNING: the gcp auth plugin is deprecated in v1.22+, unavailable in v1.25+; use gcloud instead.
To learn more, consult https://kubernetes.io/docs/reference/access-authn-authz/authentication/#client-go-credential-plugins
The Pod "netshoot-hostmount-D2E714B0-2285-45C5-B1D7-881F12783C8F" is invalid: metadata.name: Invalid value: "netshoot-hostmount-D2E714B0-2285-45C5-B1D7-881F12783C8F": a lowercase RFC 1123 subdomain must consist of lower case alphanumeric characters, '-' or '.', and must start and end with an alphanumeric character (e.g. 'example.com', regex used for validation is '[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*')
Updating rp_filter to loose mode(2) on Node: gke-cluster-a-default-pool-9ea40efb-dfjw
I0204 09:19:03.136523 44662 gcp.go:122] WARNING: the gcp auth plugin is deprecated in v1.22+, unavailable in v1.25+; use gcloud instead.
To learn more, consult https://kubernetes.io/docs/reference/access-authn-authz/authentication/#client-go-credential-plugins
The Pod "netshoot-hostmount-46C1A9FD-A371-41D3-9E98-0FBA8F3976CE" is invalid: metadata.name: Invalid value: "netshoot-hostmount-46C1A9FD-A371-41D3-9E98-0FBA8F3976CE": a lowercase RFC 1123 subdomain must consist of lower case alphanumeric characters, '-' or '.', and must start and end with an alphanumeric character (e.g. 'example.com', regex used for validation is '[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*')
Updating rp_filter to loose mode(2) on Node: gke-cluster-a-default-pool-9ea40efb-s5bx
I0204 09:19:03.491250 44665 gcp.go:122] WARNING: the gcp auth plugin is deprecated in v1.22+, unavailable in v1.25+; use gcloud instead.
To learn more, consult https://kubernetes.io/docs/reference/access-authn-authz/authentication/#client-go-credential-plugins
The Pod "netshoot-hostmount-E8CFEAE1-C825-405D-88E5-C4F21209EA47" is invalid: metadata.name: Invalid value: "netshoot-hostmount-E8CFEAE1-C825-405D-88E5-C4F21209EA47": a lowercase RFC 1123 subdomain must consist of lower case alphanumeric characters, '-' or '.', and must start and end with an alphanumeric character (e.g. 'example.com', regex used for validation is '[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*')
Shannon McFarland
Feb 4, 2022, 9:47:07 AM2/4/22
to submariner-users
The issue is in the update-rp-filter.sh - line 18. By default 'uuidgen' creates the UUID in uppercase which is a violation. I updated line 18 with:
kubectl $CONTEXT --v=4 run netshoot-hostmount-$(uuidgen | tr "[:upper:]" "[:lower:]") --overrides='{
Shannon McFarland
Feb 4, 2022, 9:53:31 AM2/4/22
to submariner-users
I submitted a PR for the file owner.
Reply all
Reply to author
Forward
0 new messages