Bug 1277842
| Summary: | Met "x509: cannot validate certificate for x.x.x.x because it doesn't contain any IP SANs" in heapster Pod | ||
|---|---|---|---|
| Product: | OpenShift Container Platform | Reporter: | chunchen <chunchen> |
| Component: | Hawkular | Assignee: | Jeff Cantrill <jcantril> |
| Status: | CLOSED CURRENTRELEASE | QA Contact: | chunchen <chunchen> |
| Severity: | medium | Docs Contact: | |
| Priority: | medium | ||
| Version: | 3.1.0 | CC: | aos-bugs, jcantril, jliggitt, mwringe, sdodson, spadgett, wsun, yanpzhan |
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | Bug Fix | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | 1273818 | Environment: | |
| Last Closed: | 2015-11-23 14:44:44 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
|
Description
chunchen
2015-11-04 08:40:47 UTC
Checked this issue using latest metrics images, it is not reproduced, please refer to below information: [root@openshift-127 ~]# docker images|grep metric | grep rcm rcm-img-docker01.build.eng.bos.redhat.com:5001/openshift3/metrics-deployer latest 981289fe2830 14 hours ago 551.4 MB rcm-img-docker01.build.eng.bos.redhat.com:5001/openshift3/metrics-hawkular-metrics latest b44dc66d64f2 14 hours ago 1.109 GB rcm-img-docker01.build.eng.bos.redhat.com:5001/openshift3/metrics-cassandra latest 8ea21f4b3377 2 weeks ago 472.7 MB rcm-img-docker01.build.eng.bos.redhat.com:5001/openshift3/metrics-heapster latest 800434e62203 2 weeks ago 228.4 MB [chunchen@F17-CCY daily]$ oc logs heapster-tsl34 Starting Heapster with the following arguments: --source=kubernetes:https://openshift-127.lab.sjc.redhat.com:8443?useServiceAccount=true&kubeletHttps=true&kubeletPort=10250 --sink=hawkular:https://hawkular-metrics:443?tenant=_system&labelToTenant=pod_namespace&caCert=/hawkular-cert/hawkular-metrics-ca.certificate&user=hawkular&pass=GkqivlQxQbGIDjX&filter=label(container_name:^/system.slice.*|^/user.slice) --logtostderr=true --tls_cert=/secrets/heapster.cert --tls_key=/secrets/heapster.key --tls_client_ca=/secrets/heapster.client-ca --allowed_users= I1105 03:25:49.269092 1 heapster.go:60] heapster --source=kubernetes:https://openshift-127.lab.sjc.redhat.com:8443?useServiceAccount=true&kubeletHttps=true&kubeletPort=10250 --sink=hawkular:https://hawkular-metrics:443?tenant=_system&labelToTenant=pod_namespace&caCert=/hawkular-cert/hawkular-metrics-ca.certificate&user=hawkular&pass=GkqivlQxQbGIDjX&filter=label(container_name:^/system.slice.*|^/user.slice) --logtostderr=true --tls_cert=/secrets/heapster.cert --tls_key=/secrets/heapster.key --tls_client_ca=/secrets/heapster.client-ca --allowed_users= I1105 03:25:49.269973 1 heapster.go:61] Heapster version 0.18.0 I1105 03:25:49.270735 1 kube_factory.go:168] Using Kubernetes client with master "https://openshift-127.lab.sjc.redhat.com:8443" and version "v1" I1105 03:25:49.270752 1 kube_factory.go:169] Using kubelet port 10250 I1105 03:25:49.271143 1 driver.go:491] Initialised Hawkular Sink with parameters {_system https://hawkular-metrics:443?tenant=_system&labelToTenant=pod_namespace&caCert=/hawkular-cert/hawkular-metrics-ca.certificate&user=hawkular&pass=GkqivlQxQbGIDjX&filter=label(container_name:^/system.slice.*|^/user.slice) 0xc2081985a0 } I1105 03:25:49.734334 1 heapster.go:71] Starting heapster on port 8082 [chunchen@F17-CCY daily]$ I thought https://github.com/openshift/openshift-ansible/pull/609 fixed this for OSE Yes, that PR adds numbers SANs to master and node certs and would've fixed this issue for any environment installed via ansible. According to Comment #2 and #4, mark it as verified. |