aws / aws/eks-anywhere

Better handling cluster create/upgrade failure when exhausting pod or service IP in CIDR range

Open
#5,215 0 comments 0 reactions 0 assignees View on GitHub
area/cli team/ce
Dominant language
Go
Stars
2.1k
Forks
328
Avg merge
1d 4h
Merged PRs (30d)
9

Description

When specifying a small pod/service CIDR range (like `1.2.3.4/14`) in cluster spec, it is possible that during cluster creation no enough and available IPs can be used to create eks-a system pods. Cluster creation can timeout without specific error signal. It is hard for user to trace down the issue. For example, during management cluster creation, CLI fails at "timeout when moving CAPI from bootstrap to workload cluster". Error happens when creating workload clusters too.

To solve this:
1. we need to update our troubleshoot guide about how to identify if it's IP exhaustion and guide user to increase the range
2. have clear error message saying the cluster creation failed because of IP exhaustion
3. Add validation to check if there are enough available IPs to create EKS-A cluster in the range

Contributor guide

Open the contributing guide

Research direction

Start with the cluster spec handling of pod and service CIDR ranges and the CLI path for cluster creation and upgrade failures. Review the troubleshoot guide and determine how IP exhaustion can be identified. Done means the guide explains recovery, failures report IP exhaustion clearly, and validation checks that the range has enough available IPs for EKS-A system pods.

Written by the indexing model from the issue text.

Assessment

Tech stack
go, kubernetes
Domain
documentation, infrastructure, networking
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
38/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.