Granting internet access to Kubernetes nodes
Written by
Updated at November 27, 2023
Issue description
When connecting to external addresses from nodes without internet access, you see this error:
Failed to pull image "cr.yandex/***": rpc error: code = Unknown desc
Error response from daemon: Gethttps://cr.yandex/v2/: net/http:
request canceled while waiting for connection (Client.Timeout exceeded while awaiting headers)
Solution
There are several ways to provide internet access to cluster nodes:
- Enable Egress NAT for the subnet of nodes
- Use a NAT gateway
- Add a public IP address to each node using node group settings.