Bug 1532684
| Summary: | 3.9.0-0.16.0 install failure verifying web console - curl of console web service fails with connection refused | ||||||
|---|---|---|---|---|---|---|---|
| Product: | OpenShift Container Platform | Reporter: | Mike Fiedler <mifiedle> | ||||
| Component: | Management Console | Assignee: | Samuel Padgett <spadgett> | ||||
| Status: | CLOSED NOTABUG | QA Contact: | Johnny Liu <jialiu> | ||||
| Severity: | high | Docs Contact: | |||||
| Priority: | unspecified | ||||||
| Version: | 3.9.0 | CC: | aos-bugs, ekuric, jokerman, mifiedle, mmccomas, mtaru, sdodson, spadgett, sselvan | ||||
| Target Milestone: | --- | Keywords: | Reopened | ||||
| Target Release: | 3.9.0 | ||||||
| Hardware: | x86_64 | ||||||
| OS: | Linux | ||||||
| Whiteboard: | |||||||
| Fixed In Version: | Doc Type: | If docs needed, set a value | |||||
| Doc Text: | Story Points: | --- | |||||
| Clone Of: | Environment: | ||||||
| Last Closed: | 2018-05-04 11:32:25 UTC | Type: | Bug | ||||
| Regression: | --- | Mount Type: | --- | ||||
| Documentation: | --- | CRM: | |||||
| Verified Versions: | Category: | --- | |||||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||
| Cloudforms Team: | --- | Target Upstream Version: | |||||
| Embargoed: | |||||||
| Attachments: |
|
||||||
|
Description
Mike Fiedler
2018-01-09 15:19:23 UTC
Can you describe the deployments in openshift-web-console namespace to see what problems it's having deploying? I have seen this too, from my cluster
--
# oc describe all
Name: webconsole
Namespace: openshift-web-console
CreationTimestamp: Tue, 09 Jan 2018 14:42:58 +0000
Labels: app=openshift-web-console
webconsole=true
Annotations: deployment.kubernetes.io/revision=1
kubectl.kubernetes.io/last-applied-configuration={"apiVersion":"apps/v1beta1","kind":"Deployment","metadata":{"annotations":{},"labels":{"app":"openshift-web-console","webconsole":"true"},"name":"webc...
Selector: webconsole=true
Replicas: 1 desired | 1 updated | 1 total | 0 available | 1 unavailable
StrategyType: Recreate
MinReadySeconds: 0
Pod Template:
Labels: webconsole=true
Service Account: webconsole
Containers:
webconsole:
Image: registry.access.redhat.com/openshift3/ose-web-console:v3.9
Port: 8443/TCP
Command:
/usr/bin/origin-web-console
--audit-log-path=-
--config=/var/webconsole-config/webconsole-config.yaml
Readiness: http-get https://:8443/healthz delay=0s timeout=1s period=10s #success=1 #failure=3
Environment: <none>
Mounts:
/var/serving-cert from serving-cert (rw)
/var/webconsole-config from webconsole-config (rw)
Volumes:
serving-cert:
Type: Secret (a volume populated by a Secret)
SecretName: webconsole-serving-cert
Optional: false
webconsole-config:
Type: ConfigMap (a volume populated by a ConfigMap)
Name: webconsole-config
Optional: false
Conditions:
Type Status Reason
---- ------ ------
Available False MinimumReplicasUnavailable
Progressing False ProgressDeadlineExceeded
OldReplicaSets: <none>
NewReplicaSet: webconsole-7c6f9fb789 (1/1 replicas created)
Events:
Type Reason Age From Message
---- ------ ---- ---- -------
Normal ScalingReplicaSet 1h deployment-controller Scaled up replica set webconsole-7c6f9fb789 to 1
Name: webconsole-7c6f9fb789
Namespace: openshift-web-console
Selector: pod-template-hash=3729596345,webconsole=true
Labels: pod-template-hash=3729596345
webconsole=true
Annotations: deployment.kubernetes.io/desired-replicas=1
deployment.kubernetes.io/max-replicas=1
deployment.kubernetes.io/revision=1
Controlled By: Deployment/webconsole
Replicas: 1 current / 1 desired
Pods Status: 0 Running / 1 Waiting / 0 Succeeded / 0 Failed
Pod Template:
Labels: pod-template-hash=3729596345
webconsole=true
Service Account: webconsole
Containers:
webconsole:
Image: registry.access.redhat.com/openshift3/ose-web-console:v3.9
Port: 8443/TCP
Command:
/usr/bin/origin-web-console
--audit-log-path=-
--config=/var/webconsole-config/webconsole-config.yaml
Readiness: http-get https://:8443/healthz delay=0s timeout=1s period=10s #success=1 #failure=3
Environment: <none>
Mounts:
/var/serving-cert from serving-cert (rw)
/var/webconsole-config from webconsole-config (rw)
Volumes:
serving-cert:
Type: Secret (a volume populated by a Secret)
SecretName: webconsole-serving-cert
Optional: false
webconsole-config:
Type: ConfigMap (a volume populated by a ConfigMap)
Name: webconsole-config
Optional: false
Events:
Type Reason Age From Message
---- ------ ---- ---- -------
Warning FailedCreate 1h replicaset-controller Error creating: pods "webconsole-7c6f9fb789-" is forbidden: error looking up service account openshift-web-console/webconsole: serviceaccount "webconsole" not found
Normal SuccessfulCreate 1h replicaset-controller Created pod: webconsole-7c6f9fb789-sv6p4
Name: webconsole
Namespace: openshift-web-console
CreationTimestamp: Tue, 09 Jan 2018 14:42:58 +0000
Labels: app=openshift-web-console
webconsole=true
Annotations: deployment.kubernetes.io/revision=1
kubectl.kubernetes.io/last-applied-configuration={"apiVersion":"apps/v1beta1","kind":"Deployment","metadata":{"annotations":{},"labels":{"app":"openshift-web-console","webconsole":"true"},"name":"webc...
Selector: webconsole=true
Replicas: 1 desired | 1 updated | 1 total | 0 available | 1 unavailable
StrategyType: Recreate
MinReadySeconds: 0
Pod Template:
Labels: webconsole=true
Service Account: webconsole
Containers:
webconsole:
Image: registry.access.redhat.com/openshift3/ose-web-console:v3.9
Port: 8443/TCP
Command:
/usr/bin/origin-web-console
--audit-log-path=-
--config=/var/webconsole-config/webconsole-config.yaml
Readiness: http-get https://:8443/healthz delay=0s timeout=1s period=10s #success=1 #failure=3
Environment: <none>
Mounts:
/var/serving-cert from serving-cert (rw)
/var/webconsole-config from webconsole-config (rw)
Volumes:
serving-cert:
Type: Secret (a volume populated by a Secret)
SecretName: webconsole-serving-cert
Optional: false
webconsole-config:
Type: ConfigMap (a volume populated by a ConfigMap)
Name: webconsole-config
Optional: false
Conditions:
Type Status Reason
---- ------ ------
Available False MinimumReplicasUnavailable
Progressing False ProgressDeadlineExceeded
OldReplicaSets: <none>
NewReplicaSet: webconsole-7c6f9fb789 (1/1 replicas created)
Events:
Type Reason Age From Message
---- ------ ---- ---- -------
Normal ScalingReplicaSet 1h deployment-controller Scaled up replica set webconsole-7c6f9fb789 to 1
Name: webconsole-7c6f9fb789
Namespace: openshift-web-console
Selector: pod-template-hash=3729596345,webconsole=true
Labels: pod-template-hash=3729596345
webconsole=true
Annotations: deployment.kubernetes.io/desired-replicas=1
deployment.kubernetes.io/max-replicas=1
deployment.kubernetes.io/revision=1
Controlled By: Deployment/webconsole
Replicas: 1 current / 1 desired
Pods Status: 0 Running / 1 Waiting / 0 Succeeded / 0 Failed
Pod Template:
Labels: pod-template-hash=3729596345
webconsole=true
Service Account: webconsole
Containers:
webconsole:
Image: registry.access.redhat.com/openshift3/ose-web-console:v3.9
Port: 8443/TCP
Command:
/usr/bin/origin-web-console
--audit-log-path=-
--config=/var/webconsole-config/webconsole-config.yaml
Readiness: http-get https://:8443/healthz delay=0s timeout=1s period=10s #success=1 #failure=3
Environment: <none>
Mounts:
/var/serving-cert from serving-cert (rw)
/var/webconsole-config from webconsole-config (rw)
Volumes:
serving-cert:
Type: Secret (a volume populated by a Secret)
SecretName: webconsole-serving-cert
Optional: false
webconsole-config:
Type: ConfigMap (a volume populated by a ConfigMap)
Name: webconsole-config
Optional: false
Events:
Type Reason Age From Message
---- ------ ---- ---- -------
Warning FailedCreate 1h replicaset-controller Error creating: pods "webconsole-7c6f9fb789-" is forbidden: error looking up service account openshift-web-console/webconsole: serviceaccount "webconsole" not found
Normal SuccessfulCreate 1h replicaset-controller Created pod: webconsole-7c6f9fb789-sv6p4
Name: webconsole-7c6f9fb789-sv6p4
Namespace: openshift-web-console
Node: ip-172-31-9-200.us-west-2.compute.internal/172.31.9.200
Start Time: Tue, 09 Jan 2018 14:42:59 +0000
Labels: pod-template-hash=3729596345
webconsole=true
Annotations: openshift.io/scc=restricted
Status: Pending
IP: 10.128.0.48
Controlled By: ReplicaSet/webconsole-7c6f9fb789
Containers:
webconsole:
Container ID:
Image: registry.access.redhat.com/openshift3/ose-web-console:v3.9
Image ID:
Port: 8443/TCP
Command:
/usr/bin/origin-web-console
--audit-log-path=-
--config=/var/webconsole-config/webconsole-config.yaml
State: Waiting
Reason: ImagePullBackOff
Ready: False
Restart Count: 0
Readiness: http-get https://:8443/healthz delay=0s timeout=1s period=10s #success=1 #failure=3
Environment: <none>
Mounts:
/var/run/secrets/kubernetes.io/serviceaccount from webconsole-token-pxcnz (ro)
/var/serving-cert from serving-cert (rw)
/var/webconsole-config from webconsole-config (rw)
Conditions:
Type Status
Initialized True
Ready False
PodScheduled True
Volumes:
serving-cert:
Type: Secret (a volume populated by a Secret)
SecretName: webconsole-serving-cert
Optional: false
webconsole-config:
Type: ConfigMap (a volume populated by a ConfigMap)
Name: webconsole-config
Optional: false
webconsole-token-pxcnz:
Type: Secret (a volume populated by a Secret)
SecretName: webconsole-token-pxcnz
Optional: false
QoS Class: BestEffort
Node-Selectors: region=infra
Tolerations: <none>
Events:
Type Reason Age From Message
---- ------ ---- ---- -------
Normal Scheduled 1h default-scheduler Successfully assigned webconsole-7c6f9fb789-sv6p4 to ip-172-31-9-200.us-west-2.compute.internal
Normal SuccessfulMountVolume 1h kubelet, ip-172-31-9-200.us-west-2.compute.internal MountVolume.SetUp succeeded for volume "webconsole-config"
Normal SuccessfulMountVolume 1h kubelet, ip-172-31-9-200.us-west-2.compute.internal MountVolume.SetUp succeeded for volume "webconsole-token-pxcnz"
Normal SuccessfulMountVolume 1h kubelet, ip-172-31-9-200.us-west-2.compute.internal MountVolume.SetUp succeeded for volume "serving-cert"
Normal Pulling 1h (x2 over 1h) kubelet, ip-172-31-9-200.us-west-2.compute.internal pulling image "registry.access.redhat.com/openshift3/ose-web-console:v3.9"
Warning Failed 1h (x2 over 1h) kubelet, ip-172-31-9-200.us-west-2.compute.internal Failed to pull image "registry.access.redhat.com/openshift3/ose-web-console:v3.9": rpc error: code = Unknown desc = unknown: Not Found
Warning Failed 1h (x2 over 1h) kubelet, ip-172-31-9-200.us-west-2.compute.internal Error: ErrImagePull
Normal SandboxChanged 1h (x6 over 1h) kubelet, ip-172-31-9-200.us-west-2.compute.internal Pod sandbox changed, it will be killed and re-created.
Normal BackOff 7m (x318 over 1h) kubelet, ip-172-31-9-200.us-west-2.compute.internal Back-off pulling image "registry.access.redhat.com/openshift3/ose-web-console:v3.9"
Warning Failed 1m (x340 over 1h) kubelet, ip-172-31-9-200.us-west-2.compute.internal Error: ImagePullBackOff
Name: webconsole
Namespace: openshift-web-console
Labels: app=openshift-web-console
Annotations: kubectl.kubernetes.io/last-applied-configuration={"apiVersion":"v1","kind":"Service","metadata":{"annotations":{"service.alpha.openshift.io/serving-cert-secret-name":"webconsole-serving-cert"},"labels...
service.alpha.openshift.io/serving-cert-secret-name=webconsole-serving-cert
service.alpha.openshift.io/serving-cert-signed-by=openshift-service-serving-signer@1515508692
Selector: webconsole=true
Type: ClusterIP
IP: 172.30.23.247
Port: https 443/TCP
TargetPort: 8443/TCP
Endpoints:
Session Affinity: None
Events: <none>
root@ip-172-31-9-200: ~ #
---
Looks like a registry issue: Normal Pulling 1h (x2 over 1h) kubelet, ip-172-31-48-201.us-west-2.compute.internal pulling image "registry.access.redhat.com/openshift3/ose-web-console:v3.9" Warning Failed 1h (x2 over 1h) kubelet, ip-172-31-48-201.us-west-2.compute.internal Failed to pull image "registry.access.redhat.com/openshift3/ose-web-console:v3.9": rpc error: code = Unknown desc = unknown: Not Found Warning Failed 1h (x2 over 1h) kubelet, ip-172-31-48-201.us-west-2.compute.internal Error: ErrImagePull Normal SandboxChanged 1h (x6 over 1h) kubelet, ip-172-31-48-201.us-west-2.compute.internal Pod sandbox changed, it will be killed and re-created. Warning Failed 5m (x325 over 1h) kubelet, ip-172-31-48-201.us-west-2.compute.internal Error: ImagePullBackOff Normal BackOff 21s (x348 over 1h) kubelet, ip-172-31-48-201.us-west-2.compute.internal Back-off pulling image "registry.access.redhat.com/openshift3/ose-web-console:v3.9" Setting openshift_web_console_prefix works. I still see an issue when the cluster has a default node selector but I will open that as a separate bug once I test a solution. *** Bug 1716788 has been marked as a duplicate of this bug. *** |