search

Azure / application-gateway-kubernetes-ingress

This is an ingress controller that can be run on Azure Kubernetes Service (AKS) to allow an Azure Application Gateway to act as the ingress for an AKS cluster.
https://azure.github.io/application-gateway-kubernetes-ingress
MIT License
678 stars 422 forks source link

Error in Continuous Deployment with AKS and AGIC using Azure Pipelines #1231

Closed sb1975 closed 10 months ago

sb1975 commented 3 years ago

Describe the bug A clear and concise description of what the bug is.

To Reproduce Steps to reproduce the behavior:

Error in running the release pipeline in Continuous Deployment with AKS and AGIC using Azure Pipelines. Any help is greatly appreciated.. 2021-07-28T15:16:08.8767293Z WARNING: Failed to query --assignee-principal-type for f4dd0eb7-132f-4d33-a9fb-df951cc81ee8 by invoking Graph API. 2021-07-28T15:16:08.8768766Z RBAC server might reject creating role assignment without --assignee-principal-type in the future. Better to specify --assignee-principal-type manually. 2021-07-28T15:16:10.0120410Z ERROR: Principal f4dd0eb7132f4d33a9fbdf951cc81ee8 does not exist in the directory . 2021-07-28T15:16:10.8664081Z WARNING: Failed to query --assignee-principal-type for f4dd0eb7-132f-4d33-a9fb-df951cc81ee8 by invoking Graph API. 2021-07-28T15:16:10.8665060Z RBAC server might reject creating role assignment without --assignee-principal-type in the future. Better to specify --assignee-principal-type manually. 2021-07-28T15:16:11.7955580Z ERROR: Principal f4dd0eb7132f4d33a9fbdf951cc81ee8 does not exist in the directory . 2021-07-28T15:16:11.8685975Z ##[error]Script failed with error: Error: The process '/bin/bash' failed with exit code 1 2021-07-28T15:16:11.8702755Z [command]/usr/bin/az account clear 2021-07-28T15:16:12.1424485Z ##[section]Finishing: Create AGIC Identity Ingress Controller details

sb1975 commented 3 years ago

2021-07-28T15:15:58.6597795Z ##[section]Starting: Create AGIC Identity 2021-07-28T15:15:58.6604806Z ============================================================================== 2021-07-28T15:15:58.6605264Z Task : Azure CLI 2021-07-28T15:15:58.6605657Z Description : Run Azure CLI commands against an Azure subscription in a Shell script when running on Linux agent or Batch script when running on Windows agent. 2021-07-28T15:15:58.6606014Z Version : 1.164.0 2021-07-28T15:15:58.6606240Z Author : Microsoft Corporation 2021-07-28T15:15:58.6606552Z Help : https://docs.microsoft.com/azure/devops/pipelines/tasks/deploy/azure-cli 2021-07-28T15:15:58.6606877Z ============================================================================== 2021-07-28T15:15:58.7843575Z [command]/usr/bin/az --version 2021-07-28T15:15:59.1816234Z azure-cli 2.26.1 2021-07-28T15:15:59.1816469Z 2021-07-28T15:15:59.1816768Z core 2.26.1 2021-07-28T15:15:59.1817203Z telemetry 1.0.6 2021-07-28T15:15:59.1817609Z 2021-07-28T15:15:59.1817838Z Extensions: 2021-07-28T15:15:59.1818297Z azure-devops 0.18.0 2021-07-28T15:15:59.1818468Z 2021-07-28T15:15:59.1818866Z Python location '/opt/az/bin/python3' 2021-07-28T15:15:59.1819321Z Extensions directory '/opt/az/azcliextensions' 2021-07-28T15:15:59.1819500Z 2021-07-28T15:15:59.1819797Z Python (Linux) 3.6.10 (default, Jul 14 2021, 08:08:50) 2021-07-28T15:15:59.1820117Z [GCC 7.5.0] 2021-07-28T15:15:59.1820241Z 2021-07-28T15:15:59.1820511Z Legal docs and information: aka.ms/AzureCliLegal 2021-07-28T15:15:59.1820696Z 2021-07-28T15:15:59.1820942Z 2021-07-28T15:15:59.1821477Z Your CLI is up-to-date. 2021-07-28T15:15:59.1826103Z 2021-07-28T15:15:59.1827079Z Please let us know how we are doing: https://aka.ms/azureclihats 2021-07-28T15:15:59.1828247Z and let us know if you're interested in trying out our newest features: https://aka.ms/CLIUXstudy 2021-07-28T15:15:59.1832610Z Setting AZURE_CONFIG_DIR env variable to: /home/vsts/work/_temp/.azclitask 2021-07-28T15:15:59.1838681Z Setting active cloud to: AzureCloud 2021-07-28T15:15:59.1849656Z [command]/usr/bin/az cloud set -n AzureCloud 2021-07-28T15:15:59.4258685Z [command]/usr/bin/az login --service-principal -u --password= --tenant 2021-07-28T15:16:00.0105962Z [ 2021-07-28T15:16:00.0106252Z { 2021-07-28T15:16:00.0106758Z "cloudName": "AzureCloud", 2021-07-28T15:16:00.0108400Z "homeTenantId": "", 2021-07-28T15:16:00.0108921Z "id": "90005c67-7555-493b-ba11-a38de0084ce6", 2021-07-28T15:16:00.0109239Z "isDefault": true, 2021-07-28T15:16:00.0109519Z "managedByTenants": [], 2021-07-28T15:16:00.0109966Z "name": "Azure Pass - Sponsorship-13July", 2021-07-28T15:16:00.0110272Z "state": "Enabled", 2021-07-28T15:16:00.0110867Z "tenantId": "", 2021-07-28T15:16:00.0111364Z "user": { 2021-07-28T15:16:00.0111997Z "name": "", 2021-07-28T15:16:00.0112296Z "type": "servicePrincipal" 2021-07-28T15:16:00.0112550Z } 2021-07-28T15:16:00.0112773Z } 2021-07-28T15:16:00.0112957Z ] 2021-07-28T15:16:00.0120323Z [command]/usr/bin/az account set --subscription 90005c67-7555-493b-ba11-a38de0084ce6 2021-07-28T15:16:00.2442631Z [command]/bin/bash /home/vsts/work/_temp/azureclitaskscript1627485358779.sh 2021-07-28T15:16:05.5385918Z { 2021-07-28T15:16:05.5387380Z "clientId": "1031baeb-212d-43fd-8662-0955be9eaa4e", 2021-07-28T15:16:05.5389254Z "clientSecretUrl": "https://control-eastus.identity.azure.net/subscriptions/90005c67-7555-493b-ba11-a38de0084ce6/resourcegroups/MC_resource-group_aks-cluster_eastus/providers/Microsoft.ManagedIdentity/userAssignedIdentities/agic-identity/credentials?tid=***&oid=f4dd0eb7-132f-4d33-a9fb-df951cc81ee8&aid=1031baeb-212d-43fd-8662-0955be9eaa4e", 2021-07-28T15:16:05.5390734Z "id": "/subscriptions/90005c67-7555-493b-ba11-a38de0084ce6/resourcegroups/MC_resource-group_aks-cluster_eastus/providers/Microsoft.ManagedIdentity/userAssignedIdentities/agic-identity", 2021-07-28T15:16:05.5391300Z "location": "eastus", 2021-07-28T15:16:05.5392044Z "name": "agic-identity", 2021-07-28T15:16:05.5392564Z "principalId": "f4dd0eb7-132f-4d33-a9fb-df951cc81ee8", 2021-07-28T15:16:05.5393115Z "resourceGroup": "MC_resource-group_aks-cluster_eastus", 2021-07-28T15:16:05.5393455Z "tags": {}, 2021-07-28T15:16:05.5404411Z "tenantId": "", 2021-07-28T15:16:05.5404898Z "type": "Microsoft.ManagedIdentity/userAssignedIdentities" 2021-07-28T15:16:05.5405224Z } 2021-07-28T15:16:08.8767293Z WARNING: Failed to query --assignee-principal-type for f4dd0eb7-132f-4d33-a9fb-df951cc81ee8 by invoking Graph API. 2021-07-28T15:16:08.8768766Z RBAC server might reject creating role assignment without --assignee-principal-type in the future. Better to specify --assignee-principal-type manually. 2021-07-28T15:16:10.0120410Z ERROR: Principal f4dd0eb7132f4d33a9fbdf951cc81ee8 does not exist in the directory . 2021-07-28T15:16:10.8664081Z WARNING: Failed to query --assignee-principal-type for f4dd0eb7-132f-4d33-a9fb-df951cc81ee8 by invoking Graph API. 2021-07-28T15:16:10.8665060Z RBAC server might reject creating role assignment without --assignee-principal-type in the future. Better to specify --assignee-principal-type manually. 2021-07-28T15:16:11.7955580Z ERROR: Principal f4dd0eb7132f4d33a9fbdf951cc81ee8 does not exist in the directory ***. 2021-07-28T15:16:11.8685975Z ##[error]Script failed with error: Error: The process '/bin/bash' failed with exit code 1 2021-07-28T15:16:11.8702755Z [command]/usr/bin/az account clear 2021-07-28T15:16:12.1424485Z ##[section]Finishing: Create AGIC Identity

sb1975 commented 3 years ago

Also looks like we need to specify the Parallelism under Execution plan else it fails..