About MH1169

MH1169 · 04-12-2023

Hi,I have a single VPC with subnets in 2 regions.SG - 1 subnet where connected PSC endpoints are attached to. Another subnet for VMs.HK - 1 subnet for VMsInter-subnet communication between SG and HK VMs are working well by creating a firewall rule to...

MH1169 · 01-25-2023

Hi,I have a GKE standard cluster on v1.23. There's an alert from GCP that we need to upgrade the node pools to use containerd images.When I checked, the default node image is already using COS with containerd. The nodes in the node pool are still on ...

MH1169 · 11-17-2022

Hi all,I'm upgrading from hybrid 1.6 to 1.7. The actual runtime pods and cert-manager upgrade went well. I'm having trouble upgrading ASM. I was on ASM 1.9. However, upgrading to ASM 1.10 failed. I removed ASM 1.9 to start a fresh. Installing ASM 1.1...

MH1169 · 11-14-2022

Hi,I have configured an ingress resource in GKE which creates an external LB to the istio pods in the GKE cluster.NEG endpoints are correctly added. But healtcheck to the pods itself are failing.The ingress FW rule to allow 130.211.0.0/22 and 35.191....

MH1169 · 07-29-2022

Hi,I've created an external HTTPS LB which connects to a private GCS bucket. There are no errors observed when saving the LB.However, accessing the URL results in a 403 error like below.I've gone through various tutorials but they all require a publi...

MH1169 · 11-14-2022

Hi Glen,Thanks for the pointers. Have added the configuration and customized backend health check.Found out that the pod readiness probe (istio service) is failing that caused the NEG readiness probe to fail.Will check further why istio internal read...

MH1169 · 08-09-2022

Hi,Ended up making the bucket public. I'll have a look at the CDN option in the future if the need to have private buckets exposed arises.Thanks!

MH1169 · 07-11-2022

Thanks for the input. As the cluster is managed by the same team, a single VPC would be the ideal route.I would like to dig a little deeper on separating VPCs from security standpoint. Would you be so kind to elaborate on that? Thanks.

MH1169 · 05-27-2022

Hi all,Interested to know the solution to this as well. I'm getting the same error as shown above. Using the overlay as described in the hybrid upgrade instructions here: https://cloud.google.com/apigee/docs/hybrid/v1.7/upgrade#gkeThanks.

MH1169 · 05-09-2022

Hi @leobelloc ,Does the form require me to be a google employee as it requires a @google.com email to login. Thanks.

My Stats

MH1169's Bio

Badges MH1169 Earned

Recent Activity

Inter-subnet communication within the same VPC for PSC services

Upgrading GKE cluster from 1.23 to 1.24

ASM 1.13.9 not connecting to hybrid runtime

External load balancer NEG healtcheck failing to GKE pods

Hosting static site from private storage bucket

Re: External load balancer NEG healtcheck failing to GKE pods

Re: Hosting static site from private storage bucket

Re: Blue/green deployment: Single or multiple VPCs

Re: Asm is not installing in GKE cluster?

Re: Support for Internal HTTP(S) LB for Google Managed Certificates