Skip to content

Commit 4df1c04

Browse files
authored
Update troubleshoot-dns-load-balancing.md
Edit review per CI 5910
1 parent b28d7c2 commit 4df1c04

1 file changed

Lines changed: 43 additions & 43 deletions

File tree

support/azure/kubernetes-fleet/networking/troubleshoot-dns-load-balancing.md

Lines changed: 43 additions & 43 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
---
2-
title: Troubleshoot Azure Kubernetes Fleet Manager DNS load balancing
2+
title: Troubleshoot Azure Kubernetes Fleet Manager DNS Load Balancing
33
description: Troubleshoot errors that occur when using DNS load balancing in Azure Kubernetes Fleet Manager.
44
author: sjwaight
55
ms.author: simonwaight
@@ -9,24 +9,24 @@ ms.date: 05/13/2025
99

1010
# Troubleshoot Azure Kubernetes Fleet Manager DNS load balancing
1111

12-
This article provides troubleshooting information for Azure Kubernetes Fleet Manager's DNS-based load balancing. Fleet Manager DNS load balancing uses Azure Traffic Manager to balance traffic across public endpoints from multiple AKS member clusters.
12+
This article provides troubleshooting information for Azure Kubernetes Fleet Manager DNS-based load balancing. Fleet Manager DNS load balancing uses Azure Traffic Manager to balance traffic across public endpoints from multiple AKS member clusters.
1313

1414
## Use Fleet Manager hub cluster to troubleshoot
1515

1616
1. User should have access to the Azure subscription and resource group where the Azure Traffic Manager profile is created.
17-
2. [Install or upgrade Azure CLI](/cli/azure/install-azure-cli) to version 2.72.0 or later.
17+
2. [Install or upgrade to Azure CLI](/cli/azure/install-azure-cli) version 2.72.0 or a later version.
1818
3. Make sure that the Kubernetes [kubectl](https://kubernetes.io/docs/reference/kubectl/overview/) command-line tool is installed. You can install kubectl by running the [az aks install-cli](/cli/azure/aks#az-aks-install-cli) command.
19-
4. Install the **fleet** Azure CLI extension using the `az extension add`command, making sure your version is at least 1.5.2.
19+
4. Install the **fleet** Azure CLI extension by using the `az extension add`command. Make sure that your installed version is at least 1.5.2.
2020

2121
```azurecli-interactive
2222
az extension add --name fleet
2323
```
2424
25-
5. Access to the Fleet Manager hub cluster Kubernetes API. For more information, see [Access the Fleet Manager hub cluster API](/azure/kubernetes-fleet/access-fleet-hub-cluster-kubernetes-api).
25+
5. Access the Fleet Manager hub cluster Kubernetes API. For more information, see [Access the Fleet Manager hub cluster API](/azure/kubernetes-fleet/access-fleet-hub-cluster-kubernetes-api).
2626
2727
## Scenario 1: TrafficManagerProfile or Traffic Manager can't be created
2828
29-
This section provides common reasons and solutions for the `TrafficManagerProfile` Kubernetes object and its associated Azure Traffic Manager resource not being created scenarios.
29+
This section provides common reasons and solutions for scenarios in which the `TrafficManagerProfile` Kubernetes object and its associated Azure Traffic Manager resource aren't created.
3030
3131
To determine the appropriate resolution, check the status of the `TrafficManagerProfile` object on the Fleet Manager hub cluster for the error message.
3232
@@ -36,13 +36,13 @@ kubectl get trafficmanagerprofile -n <namespace> <profile-name> -o yaml
3636

3737
### Error 1: The client does not have authorization to perform action
3838

39-
This issue may occur if one of the following conditions is met:
39+
This issue might occur if one of the following conditions is met:
4040

41-
* A nonexistent Azure resource group was specified in the `TrafficManagerProfile` manifest.
42-
* The resource group isn't the same Azure Subscription as the Fleet Manager resource.
41+
* A nonexistent Azure resource group is specified in the `TrafficManagerProfile` manifest.
42+
* The resource group doesn't have the same Azure Subscription value that the Fleet Manager resource has.
4343
* The Fleet Manager hub cluster identity doesn't have permission to create and manage Azure Traffic Manager profiles in the specified resource group.
4444

45-
You can check The `TrafficManagerProfile` status for details of the error. The following is the example of the `TrafficManagerProfile` status that shows the insufficient permissions issue.
45+
You can check The `TrafficManagerProfile` status for details of the error. The following example of the `TrafficManagerProfile` status shows insufficient permissions:
4646

4747
```yml
4848
status:
@@ -74,14 +74,14 @@ status:
7474
7575
To resolve this issue, follow these steps:
7676
77-
1. Ensure the Azure resource group exists and is the same Azure Subscription as the Fleet Manager.
78-
2. Check the Fleet Manager hub cluster identity has been granted the `Traffic Manager Contributor` role scoped to the resource group. For more information, see [Configure Fleet Manager permissions](/azure/kubernetes-fleet/howto-dns-load-balancing#configure-fleet-manager-permissions).
77+
1. Make sure that the Azure resource group exists and has the same Azure Subscription value that the Fleet Manager has.
78+
2. Verify that the Fleet Manager hub cluster identity is granted the `Traffic Manager Contributor` role scoped to the resource group. For more information, see [Configure Fleet Manager permissions](/azure/kubernetes-fleet/howto-dns-load-balancing#configure-fleet-manager-permissions).
7979

8080
### Error 2: Domain name is not available
8181

82-
This issue may occur if the DNS prefix generated is already in use by another Azure Traffic Manager profile. The DNS prefix consists of the namespace and the `metadata.name` field in the `TrafficManagerProfile` manifest. For example, if the namespace is `team-a` and the `metadata.name` is `webapp`, the DNS prefix would `team-a-webapp`.
82+
This issue might occur if the generated DNS prefix is already used by another Azure Traffic Manager profile. The DNS prefix consists of the namespace and the `metadata.name` field in the `TrafficManagerProfile` manifest. For example, if the namespace is `team-a` and the `metadata.name` is `webapp`, the DNS prefix is `team-a-webapp`.
8383

84-
The following is the example of the `TrafficManagerProfile` status that shows the Domain name is not available issue.
84+
The following example of the `TrafficManagerProfile` status shows that the Domain name is not available:
8585

8686
```yml
8787
status:
@@ -96,16 +96,16 @@ status:
9696

9797
#### Solution
9898

99-
To resolve this issue, use `nslookup` or a similar tool to check if the full DNS name ( for example `team-a-webapp.trafficmanager.net`) is available. If it‘s not available, consider one of the following solutions:
99+
To resolve this issue, use `nslookup` or a similar tool to determine whether the full DNS name (for example, `team-a-webapp.trafficmanager.net`) is available. If the name is not available, consider one of the following alternative solutions:
100100

101101
- Change the `metadata.name` field in the `TrafficManagerProfile` manifest to a unique name.
102-
- Use a different namespace for the `TrafficManagerProfile` manifest. This impacts the `TrafficManagerBackend` and `ServiceExport` objects, which must be in the same namespace.
102+
- Use a different namespace for the `TrafficManagerProfile` manifest. This affects the `TrafficManagerBackend` and `ServiceExport` objects. These objects must be in the same namespace.
103103

104104
### Error 3: Azure Traffic Manager subscription limits reached
105105

106-
This issue may occur if more than 200 Traffic Manager Profiles or Endpoints within a single Azure Subscription.
106+
This issue might occur if more than 200 Traffic Manager Profiles or Endpoints exist within a single Azure Subscription.
107107

108-
The following is the example of the `TrafficManagerProfile` status that shows the Azure Traffic Manager profile limits reached issue.
108+
The following example of the `TrafficManagerProfile` status shows that the Azure Traffic Manager profile limits are reached:
109109

110110
```yml
111111
status:
@@ -119,13 +119,13 @@ status:
119119
```
120120
#### Solution
121121

122-
Consider to delete unused profiles or requesting an increase in the limit. For more information, see [Azure Traffic Manager limits](/azure/azure-resource-manager/management/azure-subscription-service-limits#azure-traffic-manager-limits).
122+
Consider deleting unused profiles or requesting an increase in the limit. For more information, see [Azure Traffic Manager limits](/azure/azure-resource-manager/management/azure-subscription-service-limits#azure-traffic-manager-limits).
123123

124124
### Error 4: Azure Traffic Manager returns an error
125125

126-
This issue may occur if the Azure Traffic Manager service returns an error when creating the profile.
126+
This issue might occur if the Azure Traffic Manager service returns an error when creating the profile.
127127

128-
The following is the example of the `TrafficManagerProfile` status that shows this error.
128+
The following example of the `TrafficManagerProfile` status shows this error:
129129

130130
```yml
131131
status:
@@ -144,17 +144,17 @@ If the error persists, check the Azure Traffic Manager service health.
144144

145145
## Scenario 2: TrafficManagerBackend can't be created
146146

147-
This section provides common causes and recommended solutions for scenarios that the `TrafficManagerBackend` Kubernetes can't be created.
147+
This section provides common causes and recommended solutions for scenarios in which the `TrafficManagerBackend` Kubernetes object can't be created.
148148

149-
To determine the appropriate resolution, check the status of the `TrafficManagerBackend` object on the Fleet Manager hub cluster for the error message.
149+
To determine the appropriate resolution, check the status of the `TrafficManagerBackend` object on the Fleet Manager hub cluster for the following error message:
150150

151151
```bash
152152
kubectl get trafficmanagerbackend -n <namespace> <backend-name> -o yaml
153153
```
154154

155155
### Error 1: TrafficManagerProfile is not found or Invalid trafficManagerProfile
156156

157-
This issue may occur if one of the following conditions is met:
157+
This issue might occur if one of the following conditions is met:
158158

159159
- The `TrafficManagerBackend` was created in a different namespace than the `TrafficManagerProfile`.
160160
- The `TrafficManagerProfile` object exists, but the associated Azure Traffic Manager resource couldn't be found.
@@ -190,20 +190,20 @@ status:
190190

191191
To resolve this issue, follow these steps:
192192

193-
1. Make sure to create the `TrafficManagerBackend` in the same namespace as the `TrafficManagerProfile`.
194-
2. Ensure that the `Programmed` condition of `TrafficManagerProfile` is `Accepted`. If not, check the profile definition for validity and resubmit.
195-
3. Ensure the Azure Traffic Manager resource exists. To recreate the resource, delete the `TrafficManagerProfile` from the Fleet Manager hub cluster and reapply it.
193+
1. Make sure that you create the `TrafficManagerBackend` in the same namespace as the `TrafficManagerProfile`.
194+
2. Make sure that the `Programmed` condition of `TrafficManagerProfile` is `Accepted`. If it's not, check the profile definition for validity, and then resubmit.
195+
3. Make sure the Azure Traffic Manager resource exists. To re-create the resource, delete the `TrafficManagerProfile` from the Fleet Manager hub cluster. and then reapply it.
196196

197197
### Error 2: Invalid Service or ServiceExport
198198

199-
This issue may occur if one of the following conditions is met:
199+
This issue might occur if one of the following conditions is met:
200200

201-
- The `Service` was created in a different namespace than the `TrafficManagerBackend`.
202-
- The `Service` exists, but the `ServiceExport` was not created in the same namespace as the `TrafficManagerBackend`.
201+
- The `Service` was created in a different namespace than the `TrafficManagerBackend` object.
202+
- The `Service` exists, but the `ServiceExport` object wasn't created in the same namespace as `TrafficManagerBackend`.
203203
- The `Service` isn't defined as a `LoadBalancer` type.
204-
- The `Service` isn't exposed via an Azure public IP address or doesn't have a DNS name assigned.
204+
- The `Service` isn't exposed through an Azure public IP address or doesn't have a DNS name assigned.
205205

206-
The following are the examples of the `TrafficManagerBackend` status that shows the errors:
206+
The following examples of the `TrafficManagerBackend` status show the errors:
207207

208208
```yml
209209
status:
@@ -216,7 +216,7 @@ conditions:
216216
type: Accepted
217217
```
218218

219-
The `Service` is not defined as a `LoadBalancer` type.
219+
The `Service` is not defined as a `LoadBalancer` type:
220220

221221
```yml
222222
status:
@@ -235,17 +235,17 @@ conditions:
235235

236236
To resolve this issue, follow these steps:
237237

238-
1. Ensure at least one `Service` of a member cluster is exported in the same namespace of the `TrafficManagerBackend` by creating `ServiceExport`.
239-
2. Ensure that the exported `Service` is load balancer type and exposed via an Azure public IP address, which must have a DNS name assigned to be used in a Traffic Manager profile.
238+
1. Make sure that at least one `Service` of a member cluster is exported in the same namespace of the `TrafficManagerBackend` object by creating `ServiceExport`.
239+
2. Make sure that the exported `Service` is a load balancer type and is exposed through an Azure public IP address. This address must have an assigned DNS name to be used in a Traffic Manager profile.
240240

241241
### Error 3: Azure Traffic Manager profile is not found
242242

243-
This issue may occur if one of the following conditions is met:
243+
This issue might occur if one of the following conditions is met:
244244

245-
- The `TrafficManagerProfile` was object exists, but the associated Azure Traffic Manager resource couldn't be found.
245+
- The `TrafficManagerProfile` object exists, but the associated Azure Traffic Manager resource isn't found.
246246
- The Fleet Manager hub cluster identity doesn't have permission to create and manage Azure Traffic Manager profiles or endpoints in the specified resource group.
247247

248-
The following is the example of the `TrafficManagerBackend` status that shows the error:
248+
The following example of the `TrafficManagerBackend` status shows the error:
249249

250250
```yml
251251
status:
@@ -262,12 +262,12 @@ conditions:
262262

263263
To resolve this issue, follow these steps:
264264

265-
1. Ensure the Azure Traffic Manager resource exists. To recreate the resource, delete the `TrafficManagerProfile` from the Fleet Manager hub cluster and reapply it.
266-
2. Check the Fleet Manager hub cluster identity has been granted the `Traffic Manager Contributor` role scoped to the resource group. For more information, see [Configure Fleet Manager permissions](/azure/kubernetes-fleet/howto-dns-load-balancing#configure-fleet-manager-permissions).
265+
1. Make sure that the Azure Traffic Manager resource exists. To re-create the resource, delete the `TrafficManagerProfile` profile from the Fleet Manager hub cluster, and then reapply it.
266+
2. Verify that the Fleet Manager hub cluster identity was granted the `Traffic Manager Contributor` role that's scoped to the resource group. For more information, see [Configure Fleet Manager permissions](/azure/kubernetes-fleet/howto-dns-load-balancing#configure-fleet-manager-permissions).
267267

268268
### Error 4: Azure Traffic Manager profile limits reached
269269

270-
This issue may occur if more than 200 Azure Traffic Manager Endpoints would be created within a single Azure Subscription.
270+
This issue might occur if more than 200 Azure Traffic Manager Endpoints would be created within a single Azure subscription.
271271

272272
The following is the example of the `TrafficManagerBackend` status that shows the error:
273273

@@ -292,7 +292,7 @@ In addition to querying the Fleet Manager hub cluster, you can use Azure Log Ana
292292

293293
### TrafficManagerProfile
294294

295-
Filter entries in the `fleet-hub-net-controller-manager` category using `trafficmanagerprofile/controller.go`.
295+
Filter the entries in the `fleet-hub-net-controller-manager` category by using `trafficmanagerprofile/controller.go`:
296296

297297
```kusto
298298
AzureDiagnostics
@@ -305,7 +305,7 @@ AzureDiagnostics
305305

306306
### TrafficManagerBackend
307307

308-
Filter entries in the `fleet-hub-net-controller-manager` category using `trafficmanagerbackend/controller.go`.
308+
Filter the entries in the `fleet-hub-net-controller-manager` category by using `trafficmanagerbackend/controller.go`:
309309

310310
```kusto
311311
AzureDiagnostics

0 commit comments

Comments
 (0)