エラー内容
FluxCD でflux bootstrapを実行したところ、context deadline exceededのエラーが発生しました。
$ flux bootstrap github \
--components-extra=image-reflector-controller,image-automation-controller \
--token-auth \
--owner=piny940 \
--repository=infra \
--branch=main \
--path=kubernetes/_flux/${K8S_ENV} \
--read-write-key \
--personal
► connecting to github.com
► cloning branch "main" from Git repository "https://github.com/piny940/infra.git"
✔ cloned repository
► generating component manifests
✔ generated component manifests
✔ component manifests are up to date
► installing components in "flux-system" namespace
✔ installed components
✔ reconciled components
► determining if source secret "flux-system/flux-system" exists
► generating source secret
► applying source secret "flux-system/flux-system"
✔ reconciled source secret
► generating sync manifests
✔ generated sync manifests
✔ sync manifests are up to date
► applying sync manifests
✔ reconciled sync configuration
◎ waiting for GitRepository "flux-system/flux-system" to be reconciled
✗ gitrepository 'flux-system/flux-system' not ready: 'failed to checkout and determine revision: unable to clone 'https://github.com/piny940/infra.git': Get "https://github.com/piny940/infra.git/info/refs?service=git-upload-pack": dial tcp: lookup github.com: i/o timeout'
◎ waiting for Kustomization "flux-system/flux-system" to be reconciled
✗ client rate limiter Wait returned an error: context deadline exceeded
► confirming components are healthy
✔ helm-controller: deployment ready
✔ image-automation-controller: deployment ready
✔ image-reflector-controller: deployment ready
✔ kustomize-controller: deployment ready
✔ notification-controller: deployment ready
✔ source-controller: deployment ready
✔ all components are healthy
✗ bootstrap failed with 2 health check failure(s): [error while waiting for GitRepository to be ready: 'gitrepository 'flux-system/flux-system' not ready: 'failed to checkout and determine revision: unable to clone 'https://github.com/piny940/infra.git': Get "https://github.com/piny940/infra.git/info/refs?service=git-upload-pack": dial tcp: lookup github.com: i/o timeout'', error while waiting for Kustomization to be ready: 'client rate limiter Wait returned an error: context deadline exceeded']
CNI 周りかな？と思ったのですが、Pod 自体は正常に起動しているようでした。
k get po -A
NAMESPACE NAME READY STATUS RESTARTS AGE
flux-system helm-controller-76dff45854-mz9rm 1/1 Running 2 (21m ago) 153m
flux-system image-automation-controller-fb6c9df74-5vk8t 1/1 Running 2 (21m ago) 153m
flux-system image-reflector-controller-565565d549-zf2mg 1/1 Running 2 (21m ago) 153m
flux-system kustomize-controller-6bc5d5b96-bl6ct 1/1 Running 2 (21m ago) 153m
flux-system notification-controller-7f5cd7fdb8-8m9rl 1/1 Running 2 (21m ago) 153m
flux-system source-controller-54c89dcbf6-qwmzf 1/1 Running 2 (21m ago) 153m
kube-flannel kube-flannel-ds-7thdj 1/1 Running 2 (21m ago) 160m
kube-system coredns-7db6d8ff4d-54hlx 1/1 Running 2 (21m ago) 162m
kube-system coredns-7db6d8ff4d-brpgt 1/1 Running 2 (21m ago) 162m
kube-system etcd-cherry 1/1 Running 3 (21m ago) 163m
kube-system kube-apiserver-cherry 1/1 Running 3 (21m ago) 163m
kube-system kube-controller-manager-cherry 1/1 Running 3 (21m ago) 163m
kube-system kube-proxy-qlzgx 1/1 Running 3 (21m ago) 162m
kube-system kube-scheduler-cherry 1/1 Running 3 (21m ago) 163m
解決策
ファイアウォールの問題でした。
ufw disableして再起動したら、正常に動作しました。
ファイアウォールが無効なままなのはさすがにまずいので適切に設定し直します