deployKF icon indicating copy to clipboard operation
deployKF copied to clipboard

Istio outbound connection not working properly on EKS IPV6-only clusters

Open jdraymon opened this issue 1 year ago • 1 comments

Checks

deployKF Version

0.1.5

Kubernetes Distribution

EKS

Kubernetes Version

Client Version: v1.28.2
Kustomize Version: v5.0.4-0.20230601165947-6ce0bf390ce3
Server Version: v1.29.4-eks-036c24b

Description

While trying to deploy deployKF to an EKS IPv6-only cluster, the Dex container fails to start when attempting to make an outbound connection (specifically to fetch the Google Auth OIDC configuration at https://accounts.google.com/.well-known/openid-configuration):

Relevant Logs

failed to initialize server: server: Failed to open connector google-auth: failed to open connector: failed to create connector google-auth: failed to get provider: Get "https://accounts.google.com/.well-known/openid-configuration": read tcp [<Pod IPv6>]:44268->[2607:f8b0:400e:c0c::54]:443: read: connection reset by peer


### deployKF Values (Optional)

```yaml
deploykf_auth:
  dex:
    connectors:
      - type: google
        id: google-auth
        name: SSO
        config:
          clientID: <id>.apps.googleusercontent.com
          clientSecret: <secret>
          redirectURI: https://kubeflow.example.com/dex/callback

jdraymon avatar Jun 03 '24 21:06 jdraymon