10250 I/O timeouts error when running kubectl log command

TCP timeouts can be caused by blockages of internal traffic that runs between nodes. To investigate TCP time-outs, verify that this traffic isn't being blocked, for example, by network security groups (NSGs) on the subnet for your cluster nodes.

Symptoms

Tunnel functionalities, such as kubectl logs and code execution, work only for pods that are hosted on nodes on which tunnel service pods are deployed. Pods on other nodes that have no tunnel service pods cannot reach to the tunnel. When viewing the logs of these pods, you receive the following error message:

kubectl logs <pod>

Error from server: Get "https://aks-agentpool-000000000-vmss000002:10250/containerLogs/vsm-mba-prod/mba-api-app-794f756bc5-5zfpw/technosvc": dial tcp <IP-Address>:10250: i/o timeout

Solution

To resolve this issue, allows traffic on port 10250 as described in this article.

Contact us for help

If you have questions or need help, create a support request, or ask Azure community support. You can also submit product feedback to Azure feedback community.