How to Avoid Network Policies Interfering with Workload Identity on the Google Kubernetes Engine

1 · André König · Aug. 16, 2022, 12:08 p.m.
Today we stumbled upon an interesting case which I want to share as it might help you in your debugging journey. Let's assume you have the following infrastructure setup: Kubernetes Cluster on the Google Kubernetes Engine Workload Identity enabled. egress Network Policies in use. Problem You might think everything is fine, but your service which is communicating with Google APIs (like Google Cloud Storage Client Libraries, etc.) complains with something like: Could not load the d...