TLDR; Does GCP MCI(Multi Cluster ) use Cloud Service Mesh as MCS?
I have implemented multi-cluster networking suing MCI(Multi Cluster Ingress) already following this link https://cloud.google.com/kubernetes-engine/docs/how-to/multi-cluster-ingress-setup.
Now I can see gke-mcs-importer
is running on all clusters in the fleet and I think it is expected because MCI is relying on MCS(Multi Cluster Service).
But now I can see a number of errors in gke-mcs-importer
pods as following:
Handler error: receiving ADS response over stream: permission denied: rpc error: code = PermissionDenied desc = Permission 'trafficdirector.networks.getConfigs' denied on resource '//trafficdirector.googleapis.com/projects/xxx/networks/test-network/nodes/test-gke-default-pool-xxxx-primary' (or it may not exist).
I cannot find any resources in Cloud Service Mesh and I don’t think MCI solution creates resources on Cloud Service Mesh.
So this error log is false. Am I wrong?
My expectation is gke-mcs-importer should not interact with Cloud Service Mesh when it is used by MCI.