Temporary failure in name resolution for googleapis.com

[jerome2710]

Environment

self-hosted (https://develop.sentry.dev/self-hosted/)

Steps to Reproduce

We are currently installing a clean Sentry setup when migrating from CentOS 7 to Debian. When enabling the Google Auth login, the callback to our application fails with a 504 Gateway Timeout.

Expected Result

We would expect a successful login.

Actual Result

The browser returns a 504 Gateway Timeout. When following the logs, it seems that googleapis.com cannot be resolved;

urllib3.exceptions.MaxRetryError: SafeHTTPSConnectionPool(host='www.googleapis.com', port=443): Max retries exceeded with url: /oauth2/v4/token (Caused by NewConnectionError('<sentry.net.http.SafeHTTPSConnection object at 0x7efe23c266d0>: Failed to establish a new connection: [Errno -3] Temporary failure in name resolution'))

I tried a few things and noticed that sentry-self-hosted-nginx-1 doesn't actually resolve googleapis.com. On our previous CentOS 7 setup, this actually does work:

root@server:/opt/sentry-self-hosted/sentry# docker exec -it sentry-self-hosted-nginx-1 sh
/ # ping googleapis.com
ping: bad address 'googleapis.com'

I just followed https://develop.sentry.dev/self-hosted/#getting-started, ran ./install.sh and docker compose up -d. Do I need additional configuration to allow the Sentry containers to access the internet for the Google Auth to work?

Product Area

Settings - Auth

Link

No response

DSN

No response

Version

24.8.0

[getsantry]

Assigning to @getsentry/support for routing ⏲️

[hubertdeng123]

What version of self-hosted Sentry were you running before? It's likely that this is an issue with your VM and that there is some networking issue going on here.

[jerome2710]

@hubertdeng123 We were running Sentry 24.4.4 on CentOS 7 and are now running 24.8.0 on Debian 11.

I tried finding differences between the instances, as the old one is still running. But I can't seem to spot any. The new VM seems to be working fine, also in combination with other Docker services. It's just that Sentry can't reach Google or our Slack integration for instance.