Troubleshooting
Common issues connecting machines and reading topology, and how to fix them.
Machine shows offline
- Check the service is running:
sudo systemctl status ic-agent journalctl -u ic-agent -n 50 --no-pager - Confirm outbound HTTPS/WSS to
cloud.infracanvas.appis allowed. - Verify the API key in the unit is valid (rotated keys stop working).
Kubernetes (or Docker) resources missing
Usually a scope or permissions problem:
- The agent's scope must include
kubernetes/docker. See scopes. - The agent must run as a user that can reach them. If installed via
curl | sudo bashas root, root needs a kubeconfig (KUBECONFIG) and Docker access, otherwise those scopes go dark. The installer normally runs the agent as your login user to avoid this.
Cluster won't connect (direct connect)
Almost always an auth problem, not a networking one:
exec:auth kubeconfigs don't work with direct connect. If your kubeconfig came fromaws eks update-kubeconfig,gcloud container clusters get-credentials, oraz aks get-credentials, it authenticates by executing theaws/gcloud/azCLI — which runs on InfraCanvas's backend, not your machine, and isn't configured there. Use the relay pod option instead; see Clusters for why.- API server not reachable from the internet. Direct connect needs InfraCanvas's backend to reach your cluster's API server. Private/VPC-only clusters need the relay pod instead.
- Wrong context selected. A kubeconfig with several contexts requires picking the right one at connect time — reconnect and double-check you picked the intended cluster.
Cluster won't connect (relay pod)
- Check the pod is actually running:
kubectl get pods -n infracanvas - Check its logs:
kubectl logs -n infracanvas deploy/infracanvas-relay-agent - Confirm the cluster has outbound HTTPS/WSS access to
cloud.infracanvas.app— the pod connects outbound only, same as a VM agent, so no inbound rule is needed, but egress must be allowed.
Adding a second account disconnected the first
The agent must be 1.4.0 or newer for multi-account. Update it from the machine card, then re-run the connect command with the new key. See connecting multiple accounts.
Action output looks empty or wrong
Make sure the agent is up to date. Older agents had gaps in some host actions. Update from the machine card.
Metrics aren't showing
- Metrics are collected from the moment an agent connects; there's no retroactive history. See metrics.
- If a machine was recently added, give it a few minutes to report its first data points.
Still stuck?
Email support or reach out from the dashboard.