search

AJNOURI / Docker_Certified_Associate_Certification

Preparation for Docker Certified Associate certification exam.
MIT License
4 stars 2 forks source link

DTR installation : FATA[0005] failed to get new conv client: failed to create http client: Failed to get UCP CA: Bad status code fetching CA: 500 #6

Closed AJNOURI closed 6 years ago

AJNOURI commented 6 years ago

When installing DTR

[ajn@worker1 ~]$ docker run -it --rm docker/dtr install --ucp-node worker1.ajnouri.com,cin --ucp-username admin --ucp-url https://manager1.ajnouri.com --ucp-insecure-tls

INFO[0000] Beginning Docker Trusted Registry installation ucp-password: INFO[0004] Validating UCP cert
INFO[0004] Connecting to UCP
FATA[0005] failed to get new conv client: failed to create http client: Failed to get UCP CA: Bad status code fetching CA: 500

AJNOURI commented 6 years ago

The name resolution on the lab was a mess.
So I redeployed the lab with an internal DNS server for proper resolution.

manager [root@manager1 ~]# cat /etc/hosts

127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4
::1 localhost localhost.localdomain localhost6 localhost6.localdomain6
192.168.0.104 manager1.ajnouri.com manager1

Worker1

[root@worker1 ~]# cat /etc/hosts

127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4 ::1 localhost localhost.localdomain localhost6 localhost6.localdomain6 192.168.0.155 worker1.ajnouri.com worker1

Worker2

[root@worker2 ~]# cat /etc/hosts

127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4
::1 localhost localhost.localdomain localhost6 localhost6.localdomain6
192.168.0.134 worker2.ajnouri.com worker2

image

And the correct command:

[root@worker1 ~]# docker run -it --rm docker/dtr install --ucp-node worker1.ajnouri.com --ucp-insecure-tls

INFO[0000] Beginning Docker Trusted Registry installation ucp-url (The UCP URL including domain and port): https://manager1.ajnouri.com:44 3 ucp-username (The UCP administrator username): admin ucp-password: INFO[0023] Validating UCP cert
INFO[0023] Connecting to UCP
INFO[0024] The UCP cluster contains the following nodes without port conflicts: worker1.ajnouri.com, worker3.ajnouri.com INFO[0024] Searching containers in UCP for DTR replicas INFO[0024] Searching containers in UCP for DTR replicas INFO[0025] verifying [80 443] ports on worker1.ajnouri.com INFO[0030] starting phase 2
INFO[0000] Validating UCP cert
INFO[0000] Connecting to UCP
INFO[0000] Verifying your system is compatible with DTR INFO[0000] Checking if the node is okay to install on
INFO[0000] Creating network: dtr-ol
INFO[0001] Connecting to network: dtr-ol
INFO[0001] Waiting for phase2 container to be known to the Docker daemon INFO[0001] Starting UCP connectivity test
INFO[0001] UCP connectivity test passed
INFO[0001] Setting up replica volumes...
INFO[0003] Creating initial CA certificates
INFO[0003] Bootstrapping rethink...
INFO[0003] Creating dtr-rethinkdb-0ef140163717...
INFO[0036] Establishing connection with Rethinkdb
INFO[0036] Waiting for database dtr2 to exist
INFO[0036] Establishing connection with Rethinkdb
INFO[0038] Generated TLS certificate. dnsNames=[.com ..com example.com .dtr ..dtr] domains=[.com ..com 172.17.0.1 example.com .dtr ..dtr] ipAddresses=[172.17.0.1] INFO[0038] License config not copied from UCP because UCP has no valid license. INFO[0038] Migrating db...
INFO[0000] Establishing connection with Rethinkdb
INFO[0000] Migrating database schema fromVersion=0 toVersion=8 INFO[0004] Waiting for database notaryserver to exist
INFO[0005] Waiting for database notarysigner to exist
INFO[0005] Waiting for database jobrunner to exist
INFO[0007] Migrated database from version 0 to 8
INFO[0046] Starting all containers...
INFO[0046] Getting container configuration and starting containers... INFO[0047] Recreating dtr-rethinkdb-0ef140163717...
INFO[0055] Creating dtr-registry-0ef140163717...
INFO[0068] Creating dtr-garant-0ef140163717...
INFO[0079] Creating dtr-api-0ef140163717...
INFO[0175] Creating dtr-notary-server-0ef140163717...
INFO[0194] Recreating dtr-nginx-0ef140163717...
INFO[0206] Creating dtr-jobrunner-0ef140163717...
INFO[0314] Creating dtr-notary-signer-0ef140163717...
INFO[0331] Creating dtr-scanningstore-0ef140163717...
INFO[0348] Trying to get the kv store connection back after reconfigure INFO[0348] Establishing connection with Rethinkdb
INFO[0351] Verifying auth settings...
INFO[0351] Successfully registered dtr with UCP
INFO[0351] Establishing connection with Rethinkdb
INFO[0352] Background tag migration started
INFO[0352] Installation is complete
INFO[0352] Replica ID is set to: 0ef140163717
INFO[0352] You can use flag '--existing-replica-id 0ef140163717' when joining other replicas to your Docker Trusted Registry Cluster