Cant create HTTPRoute on Gateway

[chrisskene]

Im having an issue creating an httproute for a gateway. It always gives me the same error. I cant see why there is a network tier mismatch nor how I can fix it.

kind: Gateway
apiVersion: gateway.networking.k8s.io/v1beta1
metadata:
  name: my-gateway
  namespace: my-namespace
spec:
  gatewayClassName: gke-l7-regional-external-managed
  listeners:
  - name: https
    protocol: HTTPS
    port: 443
    tls:
      mode: Terminate
      certificateRefs:
      - name: my-cert
  addresses:
  - type: NamedAddress
    value: my-ip

apiVersion: gateway.networking.k8s.io/v1beta1
kind: HTTPRoute
metadata:
  name: my-gateway-route
  namespace: my-namespace
spec:
  parentRefs:
  - kind: Gateway
    name: my-gateway
  hostnames:
  - "my.domain"
  rules:
  - backendRefs:
    - name: my-backend
      port: 80

The project is set to the premium network tier, but the Gateway always has this error:

Gateway: Invalid : error cause: gceSync: generic::invalid_argument: Insert: The network tier of specified IP address is PREMIUM, that of Forwarding Rule must be the same. ===== Route/my-namespace/my-gateway-route: error cause: gceSync: generic::invalid_argument: Insert: The network tier of specified IP address is PREMIUM, that of Forwarding Rule must be the same.

[francislouie]

Hi @chrisskene,

Welcome to Google Cloud Community!

Based on the configuration that you provided, it seems like the Gatewayclass that you used is capable only for Standard Tier Network service IP addresses. 

Beside that, you may also check your my-ip addresses configuration if it’s standard tier or premium tier. Here are the steps to validate your ip addresses:

1. Go to Navigation Menu and Click VPC network
2. Click IP addresses
3. Find the my-ip address and validate it from the Network tier column if it is set to standard or premium tier.

For further insights on deploying gateway resources and enhance your understanding about Load balancer and Network Tier. Refer to these documentations below:

• Create a regional external HTTP(S) Gateway
• GKE Gateway Restrictions and Limitation
• Gateway Capabilities
• External Application Load Balancer Overview
• Network Service Tiers Overview

I hope the above information is helpful.

[garisingh]

The GKE Gateway controller creates the External Regional Load Balancer using the Standard Network Tier.   You are getting the error because the static IP address you created is in the PREMIUM tier (the default I believe).   So you'll need to create the IP in the STANDARD Tier:

gcloud compute addresses create IP_ADDRESS_NAME \
  --region=COMPUTE_REGION \
  --network-tier=STANDARD