GKE service directory and private uptime checks

[charithe]

Hello,

Is it possible to create private uptime checks for GKE services exposed using service directory integration? I am struggling to debug an uptime check created for a private GKE service.  The error code in the logs is VPC_REQUEST_TIMEOUT. I have the firewall rules created to allow ingress from the uptime check IP range so I don't think it's firewall related. Since GKE service directory integration is in preview, could this be a limitation arising from that? 

[Marvin_Lucero]

Hi @charithe,

---

@charithe wrote:

Is it possible to create private uptime checks for GKE services exposed using service directory integration

---

To answer your question, yes. This should support service directory integration for GKE since uptime check has option for Kubernetes Load Balancer. 

---

@charithe wrote:

I have the firewall rules created to allow ingress from the uptime check IP range so I don't think it's firewall related.

---

I just want to check on this part, how was ingress created? Based from the documentation for Service Directory for GKE, the ingress and other resources should be manually registered using the the API. 

---

@charithe wrote:

Since GKE service directory integration is in preview, could this be a limitation arising from that? 

---

Yes, it can be. But for now, having it's limitations, you may want to check and register the ingress using the Service Directory API.

[charithe]

Hi @Marvin_Lucero, thanks for replying. I am not trying to create an uptime check for a Kubernetes load balancer. IIUC, it's possible to create "Internal IP" uptime checks for services registered in the  service directory. I have registered my k8s services (ClusterIP kind) with service directory and trying to create uptime checks for them.

To give you some context, these services are already connected to a GCLB through an ingress. However, I don't want to expose the health checks of those services publicly through the GCLB/Ingress so that's why I want to create the private uptime checks using the service directory method.

[Ischca]

@charithe @Marvin_Lucero 

Is there any progress on this issue?
I am trying the same configuration.
However, I am not getting any requests to the host from the uptime check.

[charithe]

I haven't found a satisfactory solution yet. My understanding is that it requires an internal load balancer or a NodePort service (you have to remember to update the IP addresses manually if you use a NodePort).

[Ischca]

Thank you for your quick response, charithe. Your advice was of great value to me. I have made progress but it would be great if Google could provide a more streamlined solution.