search

balena-io / open-balena

Open source software to manage connected IoT devices at scale
https://balena.io/open
GNU Affero General Public License v3.0
1.04k stars 164 forks source link

`make auto-pki` command waits forever #286

Closed Zandor300 closed 3 days ago

Zandor300 commented 2 weeks ago

The make auto-pki waits forever since the output it waits for is different than in reality.

My openBalena version commit hash: 81749928ee9076d8f1db15e3ca5493cac0766c54

My output: 

open-balena-cert-manager-1  | /certs/private/mydomain.com-chain.pem Certificate will not expire in 7 days
open-balena-cert-manager-1  |   subject=C = US, ST = Washington, L = Seattle, O = balena, OU = openBalena, CN = mydomain.com
open-balena-cert-manager-1  |   issuer=C = US, ST = Washington, L = Seattle, O = balena, OU = openBalena, CN = balena Server CA 0
open-balena-cert-manager-1  | /certs/export/chain.pem Certificate will not expire in 7 days
open-balena-cert-manager-1  |   subject=CN = mydomain.com
open-balena-cert-manager-1  |   issuer=C = US, O = Let's Encrypt, CN = R11
open-balena-cert-manager-1  | /certs/private/root-ca.mydomain.com.pem Certificate will not expire in 7 days
open-balena-cert-manager-1  |   subject=C = US, ST = Washington, L = Seattle, O = balena, OU = openBalena, CN = balena Root CA 0
open-balena-cert-manager-1  |   issuer=C = US, ST = Washington, L = Seattle, O = balena, OU = openBalena, CN = balena Root CA 0
open-balena-cert-manager-1  | /certs/private/ca-bundle.mydomain.com.pem Certificate will not expire in 7 days
open-balena-cert-manager-1  |   subject=C = US, ST = Washington, L = Seattle, O = balena, OU = openBalena, CN = balena Server CA 0
open-balena-cert-manager-1  |   issuer=C = US, ST = Washington, L = Seattle, O = balena, OU = openBalena, CN = balena Root CA 0
open-balena-cert-manager-1  | /certs/private/mydomain.com.pem Certificate will not expire in 7 days
open-balena-cert-manager-1  |   subject=C = US, ST = Washington, L = Seattle, O = balena, OU = openBalena, CN = mydomain.com
open-balena-cert-manager-1  |   issuer=C = US, ST = Washington, L = Seattle, O = balena, OU = openBalena, CN = balena Server CA 0
open-balena-cert-manager-1  | /certs/private/api.mydomain.com.pem Certificate will not expire in 7 days
open-balena-cert-manager-1  |   subject=C = US, ST = Washington, L = Seattle, O = balena, OU = openBalena, CN = api.mydomain.com
open-balena-cert-manager-1  |   issuer=C = US, ST = Washington, L = Seattle, O = balena, OU = openBalena, CN = balena Server CA 0
open-balena-cert-manager-1  | /certs/private/mydomain.com-chain.pem Certificate will not expire in 7 days
open-balena-cert-manager-1  |   subject=C = US, ST = Washington, L = Seattle, O = balena, OU = openBalena, CN = mydomain.com
open-balena-cert-manager-1  |   issuer=C = US, ST = Washington, L = Seattle, O = balena, OU = openBalena, CN = balena Server CA 0
open-balena-cert-manager-1  | /certs/private/server-ca.mydomain.com.pem Certificate will not expire in 7 days
open-balena-cert-manager-1  |   subject=C = US, ST = Washington, L = Seattle, O = balena, OU = openBalena, CN = balena Server CA 0
open-balena-cert-manager-1  |   issuer=C = US, ST = Washington, L = Seattle, O = balena, OU = openBalena, CN = balena Root CA 0
open-balena-cert-manager-1  | /certs/private/vpn.mydomain.com.pem Certificate will not expire in 7 days
open-balena-cert-manager-1  |   subject=C = US, ST = Washington, L = Seattle, O = balena, OU = openBalena, CN = vpn.mydomain.com
open-balena-cert-manager-1  |   issuer=C = US, ST = Washington, L = Seattle, O = balena, OU = openBalena, CN = balena Server CA 0
ab77 commented 2 weeks ago

the relevant bits it is waiting for are here

...
open-balena-cert-manager-1  |   issuer=C = US, O = Let's Encrypt, CN = R11

.. but it's looking for R3:

    @$(MAKE) waitlog SERVICE=cert-manager LOG_STRING="issuer=C = US, O = Let's Encrypt, CN = R3"

Let's relax the regex..

ab77 commented 2 weeks ago

https://github.com/balena-io/open-balena/pull/290

ab77 commented 2 weeks ago

@Zandor300 let me know if your issue is fixed when you get a chance..

ab77 commented 3 days ago

Please reopen if this is still a problem.