https://rancher.com/ logo
Title
w

wide-midnight-35930

04/28/2023, 11:16 AM
Hi All, I am deploying the Neuvector on AKS. And the UI service I changed from
NodeIP
to
ClusterIP
. Unfortunately I cannot access it via port forwarding.
kubectl port-forward svc/neuvector-service-webui 8443
I am getting following error:
E0428 13:03:40.637788   44570 portforward.go:407] an error occurred forwarding 8443 -> 8443: error forwarding port 8443 to pod c75831976922c7807589f1822270787d8e0eacb5ab361c3c1364ea3666315564, uid : failed to execute portforward in network namespace "/var/run/netns/cni-102a557f-3507-3de5-1d59-4674ad3096d0": read tcp4 127.0.0.1:35314->127.0.0.1:8443: read: connection reset by peer
E0428 13:03:40.639058   44570 portforward.go:233] lost connection to pod
And same error if I try to forward directly from the manager pod. PS: But it is working with
NodePort
and
LoadBalancer
options. Is there any reason why is not working with
ClusterIP
?
q

quaint-candle-18606

04/28/2023, 5:11 PM
This may may or may not be helpful 😉 but this is probably more an issue with port-forwarding/networking in your AKS cluster than anything all that NeuVector specific. (But you probably knew that.)
🙌 1
NV will expect that it’s an HTTPS connection that hits the Manager… could that possibly be getting dumped to plain HTTP during the port-forward? 🤷