Troubleshoot user login issues

This document provides troubleshooting guidance for FQDN user login issues in GKE Identity Service.

Client can't reach GKE Identity Service

This issue occurs in one of the following cases:

• You're using a GKE version that doesn't support this user login method.
• The control plane VIP doesn't route the traffic to GKE Identity Service.

Error message

  Error: could not start login. Please check if cluster supports server side authentication. Details: failed to ping well-known endpoint: Get "https://cluster-url:XXXXX/.well-known/configuration": dial tcp XXX:XXXXX: connect: connection refused
   ERROR: Configuring Anthos authentication failed
  

Solution

To resolve this issue, verify that you're using a GKE version of 1.28 or higher and the version of the control plane that supports authentication using FQDN access.