This message was deleted.

Have you updated the CRDs as well?

Thank you for reply. Yes CRDs are updated too to latest available. Pod is ready for half second so its very challenging exec in to pod and see logs :)

Now the logging was not properly handled in a stdout/stderr way to enable kubectl get logs, any chance you could inspect the crashing graphd pod to know its log pvc and create a temp pod attached to it?

Thanks for manual I will try it. I tried to exec in to metad pods (which are running) and I found this type of error:

75 ThriftClientManager-inl.h:70] Failed to resolve address for 'nebula-cluster-metad-2.nebula-cluster-metad-headless.nebula.svc.cluster.local': Name or service not known (error=-2): Unknown error -2

, but when a ping domain name from pod its working. Even if I have set

kubernetesClusterDomain: "cluster.local"

in nebula-operator.

All meta are sufferring from this? or ? how is metad2 going from its log?

Yes all metad pods have same error, but with different pod address. Log from metad2:

75 ThriftClientManager-inl.h:70] Failed to resolve address for 'nebula-cluster-metad-0.nebula-cluster-metad-headless.nebula.svc.cluster.local': Name or service not known (error=-2): Unknown error -2

could you please check those headless services PublishNotReadyAddresses true or false? strange, they should be set true by the operator but now from this situation it looks like false

All headless svc have PublishNotReadyAddresses true

are metad crashing, please? If yes what are logs of metad other than services fqdn not reachable?

Metad are in running state (in logs are info about "failed to resolve address..." but it appered once after nebula redeploy, but now this error is not shown anymore).

Ah yeah I completely forgot about this. I too encountered this same issue before. It’s because during the upgrade from 3.4->3.6 the fqdn was changed, but it was not updated in the statefulset (because it’s immutable iirc). So the solution is to delete the SS then it will be re-recreated properly.

Oh, sorry for this, this should be highlighted in docs/ or fixed in the operator. Thanks @Róbert Kuzma @Jeremy Simpson