You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: support/azure/kubernetes-fleet/networking/troubleshoot-dns-load-balancing.md
+43-43Lines changed: 43 additions & 43 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,5 +1,5 @@
1
1
---
2
-
title: Troubleshoot Azure Kubernetes Fleet Manager DNS load balancing
2
+
title: Troubleshoot Azure Kubernetes Fleet Manager DNS Load Balancing
3
3
description: Troubleshoot errors that occur when using DNS load balancing in Azure Kubernetes Fleet Manager.
4
4
author: sjwaight
5
5
ms.author: simonwaight
@@ -9,24 +9,24 @@ ms.date: 05/13/2025
9
9
10
10
# Troubleshoot Azure Kubernetes Fleet Manager DNS load balancing
11
11
12
-
This article provides troubleshooting information for Azure Kubernetes Fleet Manager's DNS-based load balancing. Fleet Manager DNS load balancing uses Azure Traffic Manager to balance traffic across public endpoints from multiple AKS member clusters.
12
+
This article provides troubleshooting information for Azure Kubernetes Fleet Manager DNS-based load balancing. Fleet Manager DNS load balancing uses Azure Traffic Manager to balance traffic across public endpoints from multiple AKS member clusters.
13
13
14
14
## Use Fleet Manager hub cluster to troubleshoot
15
15
16
16
1. User should have access to the Azure subscription and resource group where the Azure Traffic Manager profile is created.
17
-
2.[Install or upgrade Azure CLI](/cli/azure/install-azure-cli)to version 2.72.0 or later.
17
+
2.[Install or upgrade to Azure CLI](/cli/azure/install-azure-cli) version 2.72.0 or a later version.
18
18
3. Make sure that the Kubernetes [kubectl](https://kubernetes.io/docs/reference/kubectl/overview/) command-line tool is installed. You can install kubectl by running the [az aks install-cli](/cli/azure/aks#az-aks-install-cli) command.
19
-
4. Install the **fleet** Azure CLI extension using the `az extension add`command, making sure your version is at least 1.5.2.
19
+
4. Install the **fleet** Azure CLI extension by using the `az extension add`command. Make sure that your installed version is at least 1.5.2.
20
20
21
21
```azurecli-interactive
22
22
az extension add --name fleet
23
23
```
24
24
25
-
5. Access to the Fleet Manager hub cluster Kubernetes API. For more information, see [Access the Fleet Manager hub cluster API](/azure/kubernetes-fleet/access-fleet-hub-cluster-kubernetes-api).
25
+
5. Access the Fleet Manager hub cluster Kubernetes API. For more information, see [Access the Fleet Manager hub cluster API](/azure/kubernetes-fleet/access-fleet-hub-cluster-kubernetes-api).
26
26
27
27
## Scenario 1: TrafficManagerProfile or Traffic Manager can't be created
28
28
29
-
This section provides common reasons and solutions for the `TrafficManagerProfile` Kubernetes object and its associated Azure Traffic Manager resource not being created scenarios.
29
+
This section provides common reasons and solutions for scenarios in which the `TrafficManagerProfile` Kubernetes object and its associated Azure Traffic Manager resource aren't created.
30
30
31
31
To determine the appropriate resolution, check the status of the `TrafficManagerProfile` object on the Fleet Manager hub cluster for the error message.
### Error 1: The client does not have authorization to perform action
38
38
39
-
This issue may occur if one of the following conditions is met:
39
+
This issue might occur if one of the following conditions is met:
40
40
41
-
* A nonexistent Azure resource group was specified in the `TrafficManagerProfile` manifest.
42
-
* The resource group isn't the same Azure Subscription as the Fleet Manager resource.
41
+
* A nonexistent Azure resource group is specified in the `TrafficManagerProfile` manifest.
42
+
* The resource group doesn't have the same Azure Subscription value that the Fleet Manager resource has.
43
43
* The Fleet Manager hub cluster identity doesn't have permission to create and manage Azure Traffic Manager profiles in the specified resource group.
44
44
45
-
You can check The `TrafficManagerProfile` status for details of the error. The following is the example of the `TrafficManagerProfile` status that shows the insufficient permissions issue.
45
+
You can check The `TrafficManagerProfile` status for details of the error. The following example of the `TrafficManagerProfile` status shows insufficient permissions:
46
46
47
47
```yml
48
48
status:
@@ -74,14 +74,14 @@ status:
74
74
75
75
To resolve this issue, follow these steps:
76
76
77
-
1. Ensure the Azure resource group exists and is the same Azure Subscription as the Fleet Manager.
78
-
2. Check the Fleet Manager hub cluster identity has been granted the `Traffic Manager Contributor` role scoped to the resource group. For more information, see [Configure Fleet Manager permissions](/azure/kubernetes-fleet/howto-dns-load-balancing#configure-fleet-manager-permissions).
77
+
1. Make sure that the Azure resource group exists and has the same Azure Subscription value that the Fleet Manager has.
78
+
2. Verify that the Fleet Manager hub cluster identity is granted the `Traffic Manager Contributor` role scoped to the resource group. For more information, see [Configure Fleet Manager permissions](/azure/kubernetes-fleet/howto-dns-load-balancing#configure-fleet-manager-permissions).
79
79
80
80
### Error 2: Domain name is not available
81
81
82
-
This issue may occur if the DNS prefix generated is already in use by another Azure Traffic Manager profile. The DNS prefix consists of the namespace and the `metadata.name` field in the `TrafficManagerProfile` manifest. For example, if the namespace is `team-a` and the `metadata.name` is `webapp`, the DNS prefix would `team-a-webapp`.
82
+
This issue might occur if the generated DNS prefix is already used by another Azure Traffic Manager profile. The DNS prefix consists of the namespace and the `metadata.name` field in the `TrafficManagerProfile` manifest. For example, if the namespace is `team-a` and the `metadata.name` is `webapp`, the DNS prefix is `team-a-webapp`.
83
83
84
-
The following is the example of the `TrafficManagerProfile` status that shows the Domain name is not available issue.
84
+
The following example of the `TrafficManagerProfile` status shows that the Domain name is not available:
85
85
86
86
```yml
87
87
status:
@@ -96,16 +96,16 @@ status:
96
96
97
97
#### Solution
98
98
99
-
To resolve this issue, use `nslookup` or a similar tool to check if the full DNS name (for example `team-a-webapp.trafficmanager.net`) is available. If it‘s not available, consider one of the following solutions:
99
+
To resolve this issue, use `nslookup` or a similar tool to determine whether the full DNS name (for example, `team-a-webapp.trafficmanager.net`) is available. If the name is not available, consider one of the following alternative solutions:
100
100
101
101
- Change the `metadata.name` field in the `TrafficManagerProfile` manifest to a unique name.
102
-
- Use a different namespace for the `TrafficManagerProfile` manifest. This impacts the `TrafficManagerBackend` and `ServiceExport` objects, which must be in the same namespace.
102
+
- Use a different namespace for the `TrafficManagerProfile` manifest. This affects the `TrafficManagerBackend` and `ServiceExport` objects. These objects must be in the same namespace.
This issue may occur if more than 200 Traffic Manager Profiles or Endpoints within a single Azure Subscription.
106
+
This issue might occur if more than 200 Traffic Manager Profiles or Endpoints exist within a single Azure Subscription.
107
107
108
-
The following is the example of the `TrafficManagerProfile` status that shows the Azure Traffic Manager profile limits reached issue.
108
+
The following example of the `TrafficManagerProfile` status shows that the Azure Traffic Manager profile limits are reached:
109
109
110
110
```yml
111
111
status:
@@ -119,13 +119,13 @@ status:
119
119
```
120
120
#### Solution
121
121
122
-
Consider to delete unused profiles or requesting an increase in the limit. For more information, see [Azure Traffic Manager limits](/azure/azure-resource-manager/management/azure-subscription-service-limits#azure-traffic-manager-limits).
122
+
Consider deleting unused profiles or requesting an increase in the limit. For more information, see [Azure Traffic Manager limits](/azure/azure-resource-manager/management/azure-subscription-service-limits#azure-traffic-manager-limits).
123
123
124
124
### Error 4: Azure Traffic Manager returns an error
125
125
126
-
This issue may occur if the Azure Traffic Manager service returns an error when creating the profile.
126
+
This issue might occur if the Azure Traffic Manager service returns an error when creating the profile.
127
127
128
-
The following is the example of the `TrafficManagerProfile` status that shows this error.
128
+
The following example of the `TrafficManagerProfile` status shows this error:
129
129
130
130
```yml
131
131
status:
@@ -144,17 +144,17 @@ If the error persists, check the Azure Traffic Manager service health.
144
144
145
145
## Scenario 2: TrafficManagerBackend can't be created
146
146
147
-
This section provides common causes and recommended solutions for scenarios that the `TrafficManagerBackend` Kubernetes can't be created.
147
+
This section provides common causes and recommended solutions for scenarios in which the `TrafficManagerBackend` Kubernetes object can't be created.
148
148
149
-
To determine the appropriate resolution, check the status of the `TrafficManagerBackend` object on the Fleet Manager hub cluster for the error message.
149
+
To determine the appropriate resolution, check the status of the `TrafficManagerBackend` object on the Fleet Manager hub cluster for the following error message:
150
150
151
151
```bash
152
152
kubectl get trafficmanagerbackend -n <namespace> <backend-name> -o yaml
153
153
```
154
154
155
155
### Error 1: TrafficManagerProfile is not found or Invalid trafficManagerProfile
156
156
157
-
This issue may occur if one of the following conditions is met:
157
+
This issue might occur if one of the following conditions is met:
158
158
159
159
- The `TrafficManagerBackend` was created in a different namespace than the `TrafficManagerProfile`.
160
160
- The `TrafficManagerProfile` object exists, but the associated Azure Traffic Manager resource couldn't be found.
@@ -190,20 +190,20 @@ status:
190
190
191
191
To resolve this issue, follow these steps:
192
192
193
-
1. Make sure to create the `TrafficManagerBackend` in the same namespace as the `TrafficManagerProfile`.
194
-
2. Ensure that the `Programmed` condition of `TrafficManagerProfile` is `Accepted`. If not, check the profile definition for validity and resubmit.
195
-
3. Ensure the Azure Traffic Manager resource exists. To recreate the resource, delete the `TrafficManagerProfile` from the Fleet Manager hub cluster and reapply it.
193
+
1. Make sure that you create the `TrafficManagerBackend` in the same namespace as the `TrafficManagerProfile`.
194
+
2. Make sure that the `Programmed` condition of `TrafficManagerProfile` is `Accepted`. If it's not, check the profile definition for validity, and then resubmit.
195
+
3. Make sure the Azure Traffic Manager resource exists. To re-create the resource, delete the `TrafficManagerProfile` from the Fleet Manager hub cluster. and then reapply it.
196
196
197
197
### Error 2: Invalid Service or ServiceExport
198
198
199
-
This issue may occur if one of the following conditions is met:
199
+
This issue might occur if one of the following conditions is met:
200
200
201
-
- The `Service` was created in a different namespace than the `TrafficManagerBackend`.
202
-
- The `Service` exists, but the `ServiceExport` was not created in the same namespace as the `TrafficManagerBackend`.
201
+
- The `Service` was created in a different namespace than the `TrafficManagerBackend` object.
202
+
- The `Service` exists, but the `ServiceExport` object wasn't created in the same namespace as `TrafficManagerBackend`.
203
203
- The `Service` isn't defined as a `LoadBalancer` type.
204
-
- The `Service` isn't exposed via an Azure public IP address or doesn't have a DNS name assigned.
204
+
- The `Service` isn't exposed through an Azure public IP address or doesn't have a DNS name assigned.
205
205
206
-
The following are the examples of the `TrafficManagerBackend` status that shows the errors:
206
+
The following examples of the `TrafficManagerBackend` status show the errors:
207
207
208
208
```yml
209
209
status:
@@ -216,7 +216,7 @@ conditions:
216
216
type: Accepted
217
217
```
218
218
219
-
The `Service` is not defined as a `LoadBalancer` type.
219
+
The `Service` is not defined as a `LoadBalancer` type:
220
220
221
221
```yml
222
222
status:
@@ -235,17 +235,17 @@ conditions:
235
235
236
236
To resolve this issue, follow these steps:
237
237
238
-
1. Ensure at least one `Service` of a member cluster is exported in the same namespace of the `TrafficManagerBackend` by creating `ServiceExport`.
239
-
2. Ensure that the exported `Service` is load balancer type and exposed via an Azure public IP address, which must have a DNS name assigned to be used in a Traffic Manager profile.
238
+
1. Make sure that at least one `Service` of a member cluster is exported in the same namespace of the `TrafficManagerBackend` object by creating `ServiceExport`.
239
+
2. Make sure that the exported `Service` is a load balancer type and is exposed through an Azure public IP address. This address must have an assigned DNS name to be used in a Traffic Manager profile.
240
240
241
241
### Error 3: Azure Traffic Manager profile is not found
242
242
243
-
This issue may occur if one of the following conditions is met:
243
+
This issue might occur if one of the following conditions is met:
244
244
245
-
- The `TrafficManagerProfile` was object exists, but the associated Azure Traffic Manager resource couldn't be found.
245
+
- The `TrafficManagerProfile` object exists, but the associated Azure Traffic Manager resource isn't found.
246
246
- The Fleet Manager hub cluster identity doesn't have permission to create and manage Azure Traffic Manager profiles or endpoints in the specified resource group.
247
247
248
-
The following is the example of the `TrafficManagerBackend` status that shows the error:
248
+
The following example of the `TrafficManagerBackend` status shows the error:
249
249
250
250
```yml
251
251
status:
@@ -262,12 +262,12 @@ conditions:
262
262
263
263
To resolve this issue, follow these steps:
264
264
265
-
1. Ensure the Azure Traffic Manager resource exists. To recreate the resource, delete the `TrafficManagerProfile` from the Fleet Manager hub cluster and reapply it.
266
-
2. Check the Fleet Manager hub cluster identity has been granted the `Traffic Manager Contributor` role scoped to the resource group. For more information, see [Configure Fleet Manager permissions](/azure/kubernetes-fleet/howto-dns-load-balancing#configure-fleet-manager-permissions).
265
+
1. Make sure that the Azure Traffic Manager resource exists. To re-create the resource, delete the `TrafficManagerProfile` profile from the Fleet Manager hub cluster, and then reapply it.
266
+
2. Verify that the Fleet Manager hub cluster identity was granted the `Traffic Manager Contributor` role that's scoped to the resource group. For more information, see [Configure Fleet Manager permissions](/azure/kubernetes-fleet/howto-dns-load-balancing#configure-fleet-manager-permissions).
0 commit comments