search

k3s-io / k3s

Lightweight Kubernetes
https://k3s.io
Apache License 2.0
28.07k stars 2.35k forks source link

Can't install v1.21.4+k3s1: sha256sum-amd64.txt returns "SignatureDoesNotMatch" HTTP 403 error #4055

Closed thibgc closed 3 years ago

thibgc commented 3 years ago

Environmental Info: K3s Version: trying to install v1.21.4+k3s1 with curl -sfL https://get.k3s.io | sh -

Node(s) CPU architecture, OS, and Version: Debian 10.10 (Linux XYZ 4.19.0-17-amd64 #1 SMP Debian 4.19.194-3 (2021-07-18) x86_64 GNU/Linux), Arch Linux (Linux XYZ 5.14.3-arch1-1 #1 SMP PREEMPT Sun, 12 Sep 2021 20:51:34 +0000 x86_64 GNU/Linux), CentOS 8.4 (Linux XYZ 4.18.0-305.12.1.el8_4.x86_64 #1 SMP Wed Aug 11 01:59:55 UTC 2021 x86_64 x86_64 x86_64 GNU/Linux)

Cluster Configuration:

Describe the bug:

curl -sfL https://get.k3s.io | sh - wants to install v1.21.4+k3s1 but exits with exit code 22 at the checksum check:

$ curl -sfL https://get.k3s.io | sh -
[INFO]  Finding release for channel stable
[INFO]  Using v1.21.4+k3s1 as release
[INFO]  Downloading hash https://github.com/k3s-io/k3s/releases/download/v1.21.4+k3s1/sha256sum-amd64.txt
$ echo $?
22

At GitHub, the URL https://github.com/k3s-io/k3s/releases/download/v1.21.4+k3s1/sha256sum-amd64.txt is a 403:

<?xml version="1.0" encoding="UTF-8"?>
<Error><Code>SignatureDoesNotMatch</Code><Message>The request signature we calculated does not match the signature you provided. Check your key and signing method.</Message><AWSAccessKeyId>AKIAIWNJYAX4CSVEH53A</AWSAccessKeyId><StringToSign>AWS4-HMAC-SHA256
20210920T210638Z
20210920/us-east-1/s3/aws4_request
07f51686c54b576fabedc0ce6a0f0b1c79c40f16b022073506b2ce2868c516e3</StringToSign><SignatureProvided>1986e71215224d7441a2fe91ec02fc9522133dbcbbff681a8c367e8fd7aa35d2</SignatureProvided><StringToSignBytes>41 57 53 34 2d 48 4d 41 43 2d 53 48 41 32 35 36 0a 32 30 32 31 30 39 32 30 54 32 31 30 36 33 38 5a 0a 32 30 32 31 30 39 32 30 2f 75 73 2d 65 61 73 74 2d 31 2f 73 33 2f 61 77 73 34 5f 72 65 71 75 65 73 74 0a 30 37 66 35 31 36 38 36 63 35 34 62 35 37 36 66 61 62 65 64 63 30 63 65 36 61 30 66 30 62 31 63 37 39 63 34 30 66 31 36 62 30 32 32 30 37 33 35 30 36 62 32 63 65 32 38 36 38 63 35 31 36 65 33</StringToSignBytes><CanonicalRequest>GET
/135516270/84f99f39-ec95-4262-964a-e774f1b7b58f
X-Amz-Algorithm=AWS4-HMAC-SHA256&amp;X-Amz-Credential=AKIAIWNJYAX4CSVEH53A%2F20210920%2Fus-east-1%2Fs3%2Faws4_request&amp;X-Amz-Date=20210920T210638Z&amp;X-Amz-Expires=300&amp;X-Amz-SignedHeaders=host&amp;actor_id=0&amp;key_id=0&amp;repo_id=135516270&amp;response-content-disposition=attachment%3B%20filename%3Dsha256sum-amd64.txt&amp;response-content-type=application%2Foctet-stream
host:github-production-release-asset-2e65be.s3.amazonaws.com

host
UNSIGNED-PAYLOAD</CanonicalRequest><CanonicalRequestBytes>47 45 54 0a 2f 31 33 35 35 31 36 32 37 30 2f 38 34 66 39 39 66 33 39 2d 65 63 39 35 2d 34 32 36 32 2d 39 36 34 61 2d 65 37 37 34 66 31 62 37 62 35 38 66 0a 58 2d 41 6d 7a 2d 41 6c 67 6f 72 69 74 68 6d 3d 41 57 53 34 2d 48 4d 41 43 2d 53 48 41 32 35 36 26 58 2d 41 6d 7a 2d 43 72 65 64 65 6e 74 69 61 6c 3d 41 4b 49 41 49 57 4e 4a 59 41 58 34 43 53 56 45 48 35 33 41 25 32 46 32 30 32 31 30 39 32 30 25 32 46 75 73 2d 65 61 73 74 2d 31 25 32 46 73 33 25 32 46 61 77 73 34 5f 72 65 71 75 65 73 74 26 58 2d 41 6d 7a 2d 44 61 74 65 3d 32 30 32 31 30 39 32 30 54 32 31 30 36 33 38 5a 26 58 2d 41 6d 7a 2d 45 78 70 69 72 65 73 3d 33 30 30 26 58 2d 41 6d 7a 2d 53 69 67 6e 65 64 48 65 61 64 65 72 73 3d 68 6f 73 74 26 61 63 74 6f 72 5f 69 64 3d 30 26 6b 65 79 5f 69 64 3d 30 26 72 65 70 6f 5f 69 64 3d 31 33 35 35 31 36 32 37 30 26 72 65 73 70 6f 6e 73 65 2d 63 6f 6e 74 65 6e 74 2d 64 69 73 70 6f 73 69 74 69 6f 6e 3d 61 74 74 61 63 68 6d 65 6e 74 25 33 42 25 32 30 66 69 6c 65 6e 61 6d 65 25 33 44 73 68 61 32 35 36 73 75 6d 2d 61 6d 64 36 34 2e 74 78 74 26 72 65 73 70 6f 6e 73 65 2d 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3d 61 70 70 6c 69 63 61 74 69 6f 6e 25 32 46 6f 63 74 65 74 2d 73 74 72 65 61 6d 0a 68 6f 73 74 3a 67 69 74 68 75 62 2d 70 72 6f 64 75 63 74 69 6f 6e 2d 72 65 6c 65 61 73 65 2d 61 73 73 65 74 2d 32 65 36 35 62 65 2e 73 33 2e 61 6d 61 7a 6f 6e 61 77 73 2e 63 6f 6d 0a 0a 68 6f 73 74 0a 55 4e 53 49 47 4e 45 44 2d 50 41 59 4c 4f 41 44</CanonicalRequestBytes><RequestId>JT1JZ6QPJTEAJQYK</RequestId><HostId>E2G9zaXCVAALn/nvC++c4XGB4w9hKvGeIFGD6YzlbJqON78MLN4RrVWrCQ7qRGoZTJ5ckg5gQJ0=</HostId></Error>

HTTP response headers:

--2021-09-20 21:07:34--  https://github.com/k3s-io/k3s/releases/download/v1.21.4+k3s1/sha256sum-amd64.txt
Resolving github.com (github.com)... 140.82.114.3
Connecting to github.com (github.com)|140.82.114.3|:443... connected.
HTTP request sent, awaiting response... 
  HTTP/1.1 302 Found
  Server: GitHub.com
  Date: Mon, 20 Sep 2021 21:07:35 GMT
  Content-Type: text/html; charset=utf-8
  Vary: X-PJAX, X-PJAX-Container, Accept-Encoding, Accept, X-Requested-With
  permissions-policy: interest-cohort=()
  Location: https://github-releases.githubusercontent.com/135516270/84f99f39-ec95-4262-964a-e774f1b7b58f?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAIWNJYAX4CSVEH53A%2F20210920%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20210920T210735Z&X-Amz-Expires=300&X-Amz-Signature=6ea9254adeeb1e9b1e5c8838755001349bfcb8acd00e5db0efa7182c2fb723f0&X-Amz-SignedHeaders=host&actor_id=0&key_id=0&repo_id=135516270&response-content-disposition=attachment%3B%20filename%3Dsha256sum-amd64.txt&response-content-type=application%2Foctet-stream
  Cache-Control: no-cache
  Strict-Transport-Security: max-age=31536000; includeSubdomains; preload
  X-Frame-Options: deny
  X-Content-Type-Options: nosniff
  X-XSS-Protection: 0
  Referrer-Policy: no-referrer-when-downgrade
  Expect-CT: max-age=2592000, report-uri="https://api.github.com/_private/browser/errors"
  Content-Security-Policy: default-src 'none'; base-uri 'self'; block-all-mixed-content; child-src github.githubassets.com; connect-src 'self' uploads.github.com www.githubstatus.com collector.githubapp.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com cdn.optimizely.com logx.optimizely.com/v1/events translator.github.com wss://alive.github.com *.actions.githubusercontent.com wss://*.actions.githubusercontent.com online.visualstudio.com/api/v1/locations raw.githubusercontent.com github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com; frame-ancestors 'none'; frame-src render.githubusercontent.com viewscreen.githubusercontent.com; img-src 'self' data: github.githubassets.com identicons.github.com collector.githubapp.com github-cloud.s3.amazonaws.com secured-user-images.githubusercontent.com/ *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; worker-src github.githubassets.com github.com/socket-worker-0af8a29d.js gist.github.com/socket-worker-0af8a29d.js
  Content-Length: 627
  X-GitHub-Request-Id: CA24:448A:108037:1D6D43:6148F817
Location: https://github-releases.githubusercontent.com/135516270/84f99f39-ec95-4262-964a-e774f1b7b58f?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAIWNJYAX4CSVEH53A%2F20210920%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20210920T210735Z&X-Amz-Expires=300&X-Amz-Signature=6ea9254adeeb1e9b1e5c8838755001349bfcb8acd00e5db0efa7182c2fb723f0&X-Amz-SignedHeaders=host&actor_id=0&key_id=0&repo_id=135516270&response-content-disposition=attachment%3B%20filename%3Dsha256sum-amd64.txt&response-content-type=application%2Foctet-stream [following]
--2021-09-20 21:07:35--  https://github-releases.githubusercontent.com/135516270/84f99f39-ec95-4262-964a-e774f1b7b58f?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAIWNJYAX4CSVEH53A%2F20210920%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20210920T210735Z&X-Amz-Expires=300&X-Amz-Signature=6ea9254adeeb1e9b1e5c8838755001349bfcb8acd00e5db0efa7182c2fb723f0&X-Amz-SignedHeaders=host&actor_id=0&key_id=0&repo_id=135516270&response-content-disposition=attachment%3B%20filename%3Dsha256sum-amd64.txt&response-content-type=application%2Foctet-stream
Resolving github-releases.githubusercontent.com (github-releases.githubusercontent.com)... 185.199.109.154, 185.199.108.154, 185.199.111.154, ...
Connecting to github-releases.githubusercontent.com (github-releases.githubusercontent.com)|185.199.109.154|:443... connected.
HTTP request sent, awaiting response... 
  HTTP/1.1 403 Forbidden
  Connection: keep-alive
  x-amz-request-id: YZ2QQDZFK5NQ6QPG
  x-amz-id-2: 2RGXO5UeKl8Gf3oBm0X1xh1+EtkjUz+Y6BN+jYIyjRRxFtOKuMTkRSS8bTa/scJ+TJrhx/atZso=
  Content-Type: application/xml
  Server: AmazonS3
  Accept-Ranges: bytes
  Via: 1.1 varnish, 1.1 varnish
  Date: Mon, 20 Sep 2021 21:07:35 GMT
  X-Served-By: cache-dca12929-DCA, cache-bur17520-BUR
  X-Cache: MISS, MISS
  X-Cache-Hits: 0, 0
  Strict-Transport-Security: max-age=31536000
  X-Fastly-Request-ID: 796f9e389c0ab74b5051b4d3fae4447007e52cbb
  transfer-encoding: chunked
2021-09-20 21:07:35 ERROR 403: Forbidden.

Steps To Reproduce:

Expected behavior:

v1.21.4+k3s1 would install -- or perhaps the installer would at least exit with an error message.

Actual behavior: Installer returns abruptly after Downloading hash https://github.com/k3s-io/k3s/releases/download/v1.21.4+k3s1/sha256sum-amd64.txt

Additional context / logs:

This was on 20 September 2021 around 2pm PDT (9pm UTC).

thibgc commented 3 years ago

(OP edited slightly to avoid unintended auto-formatting by GitHub)

thibgc commented 3 years ago

I see I was posting this at the same time as @whynowy was posting #4054.

brandond commented 3 years ago

Yes, appears to be a GH outage. Will close this in favor of #4054