search

kubernetes / ingress-nginx

Ingress NGINX Controller for Kubernetes
https://kubernetes.github.io/ingress-nginx/
Apache License 2.0
17.38k stars 8.23k forks source link

One of the services has no active endpoint #12196

Open anikfal opened 4 hours ago

anikfal commented 4 hours ago

Brief Error Report:

$ kubectl logs -n ingress-nginx ingress-nginx-controller-bc57996ff-zkvj9
...
W1015 05:23:29.862423       7 controller.go:1216] Service "default/esgf-search" does not have any active Endpoint.
W1015 05:23:29.862509       7 controller.go:1452] Unexpected error validating SSL certificate "default/esgf-hostcert" for server "192.168.49.2.nip.io": x509: certificate relies on legacy Common Name field, use SANs instead
...

The esgf-thredds service is available at http://$(minikube ip).nip.io/thredds. However, other services (e.g. https://192.168.49.2.nip.io/esg-search) cannot be accessed, throwing Apache Tomcat error (HTTP Status 404 – Not Found).

Logging information:

1) $ kubectl get all

NAME                                    READY   STATUS    RESTARTS      AGE
pod/esgf-file-server-54996dc667-cvsfd   1/1     Running   2 (23h ago)   4d1h
pod/esgf-search-599b64bb5f-j2mdn        1/1     Running   2 (23h ago)   4d1h
pod/esgf-solr-llnl-b89cb4679-pq84c      1/1     Running   2 (23h ago)   4d1h
pod/esgf-solr-master-5cc94c64d9-fvtmg   1/1     Running   2 (23h ago)   4d1h
pod/esgf-solr-slave-6c7d9c4dd4-n65xf    1/1     Running   2 (23h ago)   4d1h
pod/esgf-thredds-6ffc4568c9-4mglz       1/1     Running   2 (23h ago)   4d1h

NAME                       TYPE        CLUSTER-IP       EXTERNAL-IP   PORT(S)    AGE
service/esgf-file-server   ClusterIP   10.107.58.236    <none>        8080/TCP   4d1h
service/esgf-search        ClusterIP   10.102.134.107   <none>        8080/TCP   4d1h
service/esgf-solr-llnl     ClusterIP   10.98.245.55     <none>        8983/TCP   4d1h
service/esgf-solr-master   ClusterIP   10.101.91.73     <none>        8983/TCP   4d1h
service/esgf-solr-slave    ClusterIP   10.96.242.249    <none>        8983/TCP   4d1h
service/esgf-thredds       ClusterIP   10.102.190.18    <none>        8080/TCP   4d1h
service/kubernetes         ClusterIP   10.96.0.1        <none>        443/TCP    19d

NAME                               READY   UP-TO-DATE   AVAILABLE   AGE
deployment.apps/esgf-file-server   1/1     1            1           4d1h
deployment.apps/esgf-search        1/1     1            1           4d1h
deployment.apps/esgf-solr-llnl     1/1     1            1           4d1h
deployment.apps/esgf-solr-master   1/1     1            1           4d1h
deployment.apps/esgf-solr-slave    1/1     1            1           4d1h
deployment.apps/esgf-thredds       1/1     1            1           4d1h

NAME                                          DESIRED   CURRENT   READY   AGE
replicaset.apps/esgf-file-server-54996dc667   1         1         1       4d1h
replicaset.apps/esgf-search-599b64bb5f        1         1         1       4d1h
replicaset.apps/esgf-solr-llnl-b89cb4679      1         1         1       4d1h
replicaset.apps/esgf-solr-master-5cc94c64d9   1         1         1       4d1h
replicaset.apps/esgf-solr-slave-6c7d9c4dd4    1         1         1       4d1h
replicaset.apps/esgf-thredds-6ffc4568c9       1         1         1       4d1h

2) $ kubectl describe ingress esgf-ingress

Name:             esgf-ingress
Labels:           app.kubernetes.io/component=ingress
                  app.kubernetes.io/instance=esgf
                  app.kubernetes.io/managed-by=Helm
                  app.kubernetes.io/name=esgf
                  helm.sh/chart=esgf-0.1.0
Namespace:        default
Address:          192.168.49.2
Ingress Class:    nginx
Default backend:  <default>
TLS:
  esgf-hostcert terminates 192.168.49.2.nip.io
Rules:
  Host                 Path  Backends
  ----                 ----  --------
  192.168.49.2.nip.io  
                       /thredds                         esgf-thredds:8080 (10.244.0.228:8080)
                       /thredds/fileServer              esgf-file-server:8080 (10.244.0.224:8080)
                       /solr/aggregations/replication   esgf-solr-slave:8983 (10.244.0.226:8983)
                       /solr/datasets/replication       esgf-solr-slave:8983 (10.244.0.226:8983)
                       /solr/files/replication          esgf-solr-slave:8983 (10.244.0.226:8983)
                       /esg-search                      esgf-search:8080 (10.244.0.227:8080)
Annotations:           meta.helm.sh/release-name: esgf
                       meta.helm.sh/release-namespace: default
Events:                <none>

3) $ kubectl logs -n ingress-nginx ingress-nginx-controller-bc57996ff-zkvj9

-------------------------------------------------------------------------------
NGINX Ingress controllerShortened
  Release:       v1.11.2
  Build:         46e76e5916813cfca2a9b0bfdc34b69a0000f6b9
  Repository:    https://github.com/kubernetes/ingress-nginx
  nginx version: nginx/1.25.5

-------------------------------------------------------------------------------

W1015 05:22:57.362052       7 client_config.go:659] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I1015 05:22:57.362173       7 main.go:205] "Creating API client" host="https://10.96.0.1:443"
W1015 05:23:28.427799       7 main.go:245] Initial connection to the Kubernetes API server was retried 1 times.
I1015 05:23:28.427823       7 main.go:248] "Running in Kubernetes cluster" major="1" minor="31" git="v1.31.0" state="clean" commit="9edcffcde5595e8a5b1a35f88c421764e575afce" platform="linux/amd64"
I1015 05:23:28.617044       7 main.go:101] "SSL fake certificate created" file="/etc/ingress-controller/ssl/default-fake-certificate.pem"
I1015 05:23:28.647671       7 ssl.go:535] "loading tls certificate" path="/usr/local/certificates/cert" key="/usr/local/certificates/key"
I1015 05:23:28.656382       7 nginx.go:271] "Starting NGINX Ingress controller"
I1015 05:23:28.659329       7 event.go:377] Event(v1.ObjectReference{Kind:"ConfigMap", Namespace:"ingress-nginx", Name:"ingress-nginx-controller", UID:"55f11038-1146-4340-a801-538510faf1e1", APIVersion:"v1", ResourceVersion:"14412", FieldPath:""}): type: 'Normal' reason: 'CREATE' ConfigMap ingress-nginx/ingress-nginx-controller
I1015 05:23:28.661782       7 event.go:377] Event(v1.ObjectReference{Kind:"ConfigMap", Namespace:"ingress-nginx", Name:"tcp-services", UID:"1c87fa9a-3c4d-4450-bf05-41570d966dfb", APIVersion:"v1", ResourceVersion:"14413", FieldPath:""}): type: 'Normal' reason: 'CREATE' ConfigMap ingress-nginx/tcp-services
I1015 05:23:28.661799       7 event.go:377] Event(v1.ObjectReference{Kind:"ConfigMap", Namespace:"ingress-nginx", Name:"udp-services", UID:"25eeda36-b138-4b99-adf3-87ba2e47273e", APIVersion:"v1", ResourceVersion:"14414", FieldPath:""}): type: 'Normal' reason: 'CREATE' ConfigMap ingress-nginx/udp-services
I1015 05:23:29.761522       7 store.go:440] "Found valid IngressClass" ingress="default/esgf-ingress" ingressclass="nginx"
I1015 05:23:29.761853       7 event.go:377] Event(v1.ObjectReference{Kind:"Ingress", Namespace:"default", Name:"esgf-ingress", UID:"0bcb1e5f-8ca5-4378-82b3-6a5442964bf1", APIVersion:"networking.k8s.io/v1", ResourceVersion:"226305", FieldPath:""}): type: 'Normal' reason: 'Sync' Scheduled for sync
I1015 05:23:29.762617       7 backend_ssl.go:67] "Adding secret to local store" name="default/esgf-hostcert"
I1015 05:23:29.859304       7 nginx.go:317] "Starting NGINX process"
I1015 05:23:29.859373       7 leaderelection.go:250] attempting to acquire leader lease ingress-nginx/ingress-nginx-leader...
I1015 05:23:29.861924       7 nginx.go:337] "Starting validation webhook" address=":8443" certPath="/usr/local/certificates/cert" keyPath="/usr/local/certificates/key"
W1015 05:23:29.862423       7 controller.go:1216] Service "default/esgf-search" does not have any active Endpoint.
W1015 05:23:29.862509       7 controller.go:1452] Unexpected error validating SSL certificate "default/esgf-hostcert" for server "192.168.49.2.nip.io": x509: certificate relies on legacy Common Name field, use SANs instead
W1015 05:23:29.862745       7 controller.go:1453] Validating certificate against DNS names. This will be deprecated in a future version
I1015 05:23:29.862907       7 controller.go:193] "Configuration changes detected, backend reload required"
I1015 05:23:29.866636       7 leaderelection.go:260] successfully acquired lease ingress-nginx/ingress-nginx-leader
I1015 05:23:29.866698       7 status.go:85] "New leader elected" identity="ingress-nginx-controller-bc57996ff-zkvj9"
I1015 05:23:29.868515       7 status.go:219] "POD is not ready" pod="ingress-nginx/ingress-nginx-controller-bc57996ff-zkvj9" node="minikube"
I1015 05:23:29.909212       7 controller.go:213] "Backend successfully reloaded"
I1015 05:23:29.909282       7 controller.go:224] "Initial sync, sleeping for 1 second"
I1015 05:23:29.909304       7 event.go:377] Event(v1.ObjectReference{Kind:"Pod", Namespace:"ingress-nginx", Name:"ingress-nginx-controller-bc57996ff-zkvj9", UID:"0d62381f-bde6-4596-8178-0804210137dd", APIVersion:"v1", ResourceVersion:"226332", FieldPath:""}): type: 'Normal' reason: 'RELOAD' NGINX reload triggered due to a change in configuration
W1015 05:23:33.689983       7 controller.go:1216] Service "default/esgf-search" does not have any active Endpoint.
W1015 05:23:33.690006       7 controller.go:1452] Unexpected error validating SSL certificate "default/esgf-hostcert" for server "192.168.49.2.nip.io": x509: certificate relies on legacy Common Name field, use SANs instead
W1015 05:23:33.690015       7 controller.go:1453] Validating certificate against DNS names. This will be deprecated in a future version
W1015 05:23:37.025635       7 controller.go:1216] Service "default/esgf-search" does not have any active Endpoint.
W1015 05:23:37.025728       7 controller.go:1452] Unexpected error validating SSL certificate "default/esgf-hostcert" for server "192.168.49.2.nip.io": x509: certificate relies on legacy Common Name field, use SANs instead
W1015 05:23:37.025760       7 controller.go:1453] Validating certificate against DNS names. This will be deprecated in a future version
W1015 05:23:40.358358       7 controller.go:1216] Service "default/esgf-search" does not have any active Endpoint.
W1015 05:23:40.358428       7 controller.go:1452] Unexpected error validating SSL certificate "default/esgf-hostcert" for server "192.168.49.2.nip.io": x509: certificate relies on legacy Common Name field, use SANs instead
W1015 05:23:40.358457       7 controller.go:1453] Validating certificate against DNS names. This will be deprecated in a future version
W1015 05:23:43.692279       7 controller.go:1216] Service "default/esgf-search" does not have any active Endpoint.
W1015 05:23:43.692425       7 controller.go:1452] Unexpected error validating SSL certificate "default/esgf-hostcert" for server "192.168.49.2.nip.io": x509: certificate relies on legacy Common Name field, use SANs instead
W1015 05:23:43.692467       7 controller.go:1453] Validating certificate against DNS names. This will be deprecated in a future version
W1015 05:23:47.024895       7 controller.go:1452] Unexpected error validating SSL certificate "default/esgf-hostcert" for server "192.168.49.2.nip.io": x509: certificate relies on legacy Common Name field, use SANs instead
W1015 05:23:47.024940       7 controller.go:1453] Validating certificate against DNS names. This will be deprecated in a future version
W1015 05:23:51.841048       7 controller.go:1452] Unexpected error validating SSL certificate "default/esgf-hostcert" for server "192.168.49.2.nip.io": x509: certificate relies on legacy Common Name field, use SANs instead
W1015 05:23:51.841137       7 controller.go:1453] Validating certificate against DNS names. This will be deprecated in a future version
I1015 05:24:29.877999       7 status.go:304] "updating Ingress status" namespace="default" ingress="esgf-ingress" currentValue=null newValue=[{"ip":"192.168.49.2"}]
W1015 05:24:29.885193       7 controller.go:1452] Unexpected error validating SSL certificate "default/esgf-hostcert" for server "192.168.49.2.nip.io": x509: certificate relies on legacy Common Name field, use SANs instead
W1015 05:24:29.885214       7 controller.go:1453] Validating certificate against DNS names. This will be deprecated in a future version
I1015 05:24:29.884907       7 event.go:377] Event(v1.ObjectReference{Kind:"Ingress", Namespace:"default", Name:"esgf-ingress", UID:"0bcb1e5f-8ca5-4378-82b3-6a5442964bf1", APIVersion:"networking.k8s.io/v1", ResourceVersion:"226633", FieldPath:""}): type: 'Normal' reason: 'Sync' Scheduled for sync
192.168.49.1 - - [15/Oct/2024:05:29:41 +0000] "GET /thredds/catalog/catalog.html HTTP/2.0" 200 3547 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/112.0" 383 0.009 [default-esgf-thredds-8080] [] 10.244.0.228:8080 3559 0.008 200 e217ec1a1718a4a50dd6ed7bd9ea3542
192.168.49.1 - - [15/Oct/2024:05:29:42 +0000] "GET /thredds/catalog/esgcet/catalog.html HTTP/2.0" 200 3261 "https://192.168.49.2.nip.io/thredds/catalog/catalog.html" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/112.0" 95 0.080 [default-esgf-thredds-8080] [] 10.244.0.228:8080 3273 0.081 200 b83c8680bf97cb03006f3feb1799e5a1
192.168.49.1 - - [15/Oct/2024:11:33:12 +0000] "GET /thredds/catalog/catalog.html HTTP/2.0" 200 3547 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/112.0" 357 0.003 [default-esgf-thredds-8080] [] 10.244.0.228:8080 3559 0.003 200 95e1b757864a93eb602efd3d02dca708
192.168.49.1 - - [15/Oct/2024:11:33:13 +0000] "GET /thredds/catalog/esgcet/catalog.html HTTP/2.0" 200 3261 "https://192.168.49.2.nip.io/thredds/catalog/catalog.html" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/112.0" 94 0.005 [default-esgf-thredds-8080] [] 10.244.0.228:8080 3273 0.004 200 5c5faf2f6333814dba5206b557d50dee
192.168.49.1 - - [15/Oct/2024:11:33:13 +0000] "GET /thredds/scan_folder.png HTTP/2.0" 304 0 "https://192.168.49.2.nip.io/thredds/catalog/esgcet/catalog.html" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/112.0" 155 0.011 [default-esgf-thredds-8080] [] 10.244.0.228:8080 0 0.010 304 9343718ef28898385d6bd10afee9d0b5
192.168.49.1 - - [15/Oct/2024:13:08:34 +0000] "GET /thredds/catalog/catalog.html HTTP/2.0" 200 3547 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/112.0" 357 0.004 [default-esgf-thredds-8080] [] 10.244.0.228:8080 3559 0.004 200 ed5bc3ef1d65f0320de9d9e9350540a3
192.168.49.1 - - [15/Oct/2024:13:08:35 +0000] "GET /thredds/catalog/esgcet/catalog.html HTTP/2.0" 200 3261 "https://192.168.49.2.nip.io/thredds/catalog/catalog.html" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/112.0" 94 0.003 [default-esgf-thredds-8080] [] 10.244.0.228:8080 3273 0.004 200 c9f87c092c820d85c9cd6185e04c0029
192.168.49.1 - - [15/Oct/2024:13:08:48 +0000] "GET /thredds/catalog/catalog.html HTTP/2.0" 200 3547 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:131.0) Gecko/20100101 Firefox/131.0" 329 0.004 [default-esgf-thredds-8080] [] 10.244.0.228:8080 3559 0.004 200 fdb5be5ec6cc1ea827fa6ac35fcb0981
192.168.49.1 - - [15/Oct/2024:13:08:49 +0000] "GET /thredds/tds.css HTTP/2.0" 200 5519 "https://192.168.49.2.nip.io/thredds/catalog/catalog.html" "Mozilla/5.0 (X11; Linux x86_64; rv:131.0) Gecko/20100101 Firefox/131.0" 111 0.008 [default-esgf-thredds-8080] [] 10.244.0.228:8080 5519 0.009 200 b3e6e88983153f1d93aa76f3525de5fa
192.168.49.1 - - [15/Oct/2024:13:08:49 +0000] "GET /thredds/tdsCat.css HTTP/2.0" 200 22 "https://192.168.49.2.nip.io/thredds/catalog/catalog.html" "Mozilla/5.0 (X11; Linux x86_64; rv:131.0) Gecko/20100101 Firefox/131.0" 29 0.008 [default-esgf-thredds-8080] [] 10.244.0.228:8080 22 0.009 200 10ae0644fbcf61cd21d876dc57684143
192.168.49.1 - - [15/Oct/2024:13:08:49 +0000] "GET /thredds/threddsIcon.png HTTP/2.0" 200 3883 "https://192.168.49.2.nip.io/thredds/catalog/catalog.html" "Mozilla/5.0 (X11; Linux x86_64; rv:131.0) Gecko/20100101 Firefox/131.0" 101 0.009 [default-esgf-thredds-8080] [] 10.244.0.228:8080 3883 0.010 200 a14e47f2b934a7aa299e832abb79628c
192.168.49.1 - - [15/Oct/2024:13:08:49 +0000] "GET /thredds/folder.png HTTP/2.0" 200 585 "https://192.168.49.2.nip.io/thredds/catalog/catalog.html" "Mozilla/5.0 (X11; Linux x86_64; rv:131.0) Gecko/20100101 Firefox/131.0" 29 0.009 [default-esgf-thredds-8080] [] 10.244.0.228:8080 585 0.009 200 0a87f785b9563728580c23448f24de0e
192.168.49.1 - - [15/Oct/2024:13:08:49 +0000] "GET /favicon.ico HTTP/2.0" 404 146 "https://192.168.49.2.nip.io/thredds/catalog/catalog.html" "Mozilla/5.0 (X11; Linux x86_64; rv:131.0) Gecko/20100101 Firefox/131.0" 29 0.000 [upstream-default-backend] [] 127.0.0.1:8181 146 0.001 404 bb89dba8a721d24d2a26f99efdd86378
192.168.49.1 - - [15/Oct/2024:13:08:50 +0000] "GET /thredds/catalog/esgcet/catalog.html HTTP/2.0" 200 3261 "https://192.168.49.2.nip.io/thredds/catalog/catalog.html" "Mozilla/5.0 (X11; Linux x86_64; rv:131.0) Gecko/20100101 Firefox/131.0" 42 0.003 [default-esgf-thredds-8080] [] 10.244.0.228:8080 3273 0.002 200 f27bdac2f4937343b1da5bbb5dfe09ef
192.168.49.1 - - [15/Oct/2024:13:08:50 +0000] "GET /thredds/scan_folder.png HTTP/2.0" 200 626 "https://192.168.49.2.nip.io/thredds/catalog/esgcet/catalog.html" "Mozilla/5.0 (X11; Linux x86_64; rv:131.0) Gecko/20100101 Firefox/131.0" 85 0.001 [default-esgf-thredds-8080] [] 10.244.0.228:8080 626 0.001 200 f9f2ca788a4a3220ca790a205d7db1c9
192.168.49.1 - - [15/Oct/2024:13:09:02 +0000] "GET /esg-search HTTP/2.0" 404 682 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:131.0) Gecko/20100101 Firefox/131.0" 24 0.016 [default-esgf-search-8080] [] 10.244.0.227:8080 682 0.015 404 0e443239dcc3e725ee285b338ed1fb45
192.168.49.1 - - [15/Oct/2024:13:09:09 +0000] "GET /search HTTP/2.0" 404 146 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:131.0) Gecko/20100101 Firefox/131.0" 21 0.000 [upstream-default-backend] [] 127.0.0.1:8181 146 0.001 404 5dff821788ba8c35ea6667ad6f869807
192.168.49.1 - - [15/Oct/2024:13:09:15 +0000] "GET /esgf-search HTTP/2.0" 404 146 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:131.0) Gecko/20100101 Firefox/131.0" 25 0.001 [upstream-default-backend] [] 127.0.0.1:8181 146 0.000 404 a33f97da4854966ec30e05df522d9152
192.168.49.1 - - [15/Oct/2024:13:09:20 +0000] "GET /esg-search HTTP/2.0" 404 682 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:131.0) Gecko/20100101 Firefox/131.0" 24 0.003 [default-esgf-search-8080] [] 10.244.0.227:8080 682 0.003 404 6f472615dfd03b390ec19eb62736d6a8
192.168.49.1 - - [15/Oct/2024:13:16:31 +0000] "GET /thredds/catalog/catalog.html HTTP/2.0" 200 3547 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/112.0" 357 0.003 [default-esgf-thredds-8080] [] 10.244.0.228:8080 3559 0.003 200 7979550a725bddf7089bcdc475e0dcff
192.168.49.1 - - [15/Oct/2024:13:22:39 +0000] "GET /thredds/catalog/catalog.html HTTP/2.0" 200 3547 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/112.0" 357 0.003 [default-esgf-thredds-8080] [] 10.244.0.228:8080 3559 0.003 200 81486470937f32a2ed6824a99b3590fb
192.168.49.1 - - [15/Oct/2024:13:22:41 +0000] "GET /thredds/catalog/esgcet/catalog.html HTTP/2.0" 200 3261 "https://192.168.49.2.nip.io/thredds/catalog/catalog.html" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/112.0" 94 0.002 [default-esgf-thredds-8080] [] 10.244.0.228:8080 3273 0.003 200 6a9857610638219b8b4a7634d74ca624
192.168.49.1 - - [15/Oct/2024:13:22:56 +0000] "GET /esg-search/ HTTP/2.0" 404 682 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/112.0" 26 0.005 [default-esgf-search-8080] [] 10.244.0.227:8080 682 0.004 404 ae42d54043c640db94787165bc72f1a5
192.168.49.1 - - [15/Oct/2024:13:23:06 +0000] "GET /search HTTP/2.0" 404 146 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/112.0" 22 0.001 [upstream-default-backend] [] 127.0.0.1:8181 146 0.000 404 4e8d3424125033fa79be813727d37e1e
192.168.49.1 - - [15/Oct/2024:13:23:11 +0000] "GET /esg-search/search HTTP/2.0" 200 1109 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/112.0" 30 0.004 [default-esgf-search-8080] [] 10.244.0.227:8080 1109 0.005 200 434f6971d4f22d546d6685c8779292c6
192.168.49.1 - - [15/Oct/2024:13:23:21 +0000] "GET / HTTP/2.0" 404 146 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/112.0" 18 0.000 [upstream-default-backend] [] 127.0.0.1:8181 146 0.001 404 4c953334f4367af4423abe19bf0ea7c7
192.168.49.1 - - [15/Oct/2024:13:23:24 +0000] "GET /esg-search/ HTTP/2.0" 404 682 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/112.0" 26 0.001 [default-esgf-search-8080] [] 10.244.0.227:8080 682 0.001 404 01cd22d834ebfd7f286b0aad3082adf3
192.168.49.1 - - [15/Oct/2024:13:30:16 +0000] "GET /thredds/catalog/catalog.html HTTP/2.0" 200 3547 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/112.0" 357 0.003 [default-esgf-thredds-8080] [] 10.244.0.228:8080 3559 0.003 200 f226e88924bd05d78e5eb09bbaf6e348
192.168.49.1 - - [15/Oct/2024:13:30:17 +0000] "GET /thredds/catalog/esgcet/catalog.html HTTP/2.0" 200 3261 "https://192.168.49.2.nip.io/thredds/catalog/catalog.html" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/112.0" 94 0.003 [default-esgf-thredds-8080] [] 10.244.0.228:8080 3273 0.002 200 204fd67fa57c55a46c4538c3e177056d
192.168.49.1 - - [15/Oct/2024:13:30:20 +0000] "GET /thredds/catalog/catalog.html HTTP/2.0" 200 3547 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/112.0" 37 0.003 [default-esgf-thredds-8080] [] 10.244.0.228:8080 3559 0.003 200 b9092404c4e2dda42128bf930300bdbf
192.168.49.1 - - [15/Oct/2024:13:30:20 +0000] "GET /thredds/catalog/catalog.html HTTP/2.0" 200 3547 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/112.0" 37 0.002 [default-esgf-thredds-8080] [] 10.244.0.228:8080 3559 0.003 200 a0cd5a9009369556aa629bdcc0161ba9

4) $ kubectl describe pod ingress-nginx-controller-bc57996ff-zkvj9 -n ingress-nginx

Name:             ingress-nginx-controller-bc57996ff-zkvj9
Namespace:        ingress-nginx
Priority:         0
Service Account:  ingress-nginx
Node:             minikube/192.168.49.2
Start Time:       Thu, 26 Sep 2024 14:31:39 +0200
Labels:           app.kubernetes.io/component=controller
                  app.kubernetes.io/instance=ingress-nginx
                  app.kubernetes.io/name=ingress-nginx
                  gcp-auth-skip-secret=true
                  pod-template-hash=bc57996ff
Annotations:      <none>
Status:           Running
IP:               10.244.0.222
IPs:
  IP:           10.244.0.222
Controlled By:  ReplicaSet/ingress-nginx-controller-bc57996ff
Containers:
  controller:
    Container ID:  docker://eb07dc0858f88393e6f17d1c1abe292315baca4b6c51d860fd0faeebfa45ae83
    Image:         registry.k8s.io/ingress-nginx/controller:v1.11.2@sha256:d5f8217feeac4887cb1ed21f27c2674e58be06bd8f5184cacea2a69abaf78dce
    Image ID:      docker-pullable://registry.k8s.io/ingress-nginx/controller@sha256:d5f8217feeac4887cb1ed21f27c2674e58be06bd8f5184cacea2a69abaf78dce
    Ports:         80/TCP, 443/TCP, 8443/TCP
    Host Ports:    80/TCP, 443/TCP, 0/TCP
    Args:
      /nginx-ingress-controller
      --election-id=ingress-nginx-leader
      --controller-class=k8s.io/ingress-nginx
      --watch-ingress-without-class=true
      --configmap=$(POD_NAMESPACE)/ingress-nginx-controller
      --tcp-services-configmap=$(POD_NAMESPACE)/tcp-services
      --udp-services-configmap=$(POD_NAMESPACE)/udp-services
      --validating-webhook=:8443
      --validating-webhook-certificate=/usr/local/certificates/cert
      --validating-webhook-key=/usr/local/certificates/key
    State:          Running
      Started:      Tue, 15 Oct 2024 07:22:57 +0200
    Last State:     Terminated
      Reason:       Error
      Exit Code:    255
      Started:      Mon, 14 Oct 2024 11:46:23 +0200
      Finished:     Tue, 15 Oct 2024 07:22:46 +0200
    Ready:          True
    Restart Count:  12
    Requests:
      cpu:      100m
      memory:   90Mi
    Liveness:   http-get http://:10254/healthz delay=10s timeout=1s period=10s #success=1 #failure=5
    Readiness:  http-get http://:10254/healthz delay=10s timeout=1s period=10s #success=1 #failure=3
    Environment:
      POD_NAME:       ingress-nginx-controller-bc57996ff-zkvj9 (v1:metadata.name)
      POD_NAMESPACE:  ingress-nginx (v1:metadata.namespace)
      LD_PRELOAD:     /usr/local/lib/libmimalloc.so
    Mounts:
      /usr/local/certificates/ from webhook-cert (ro)
      /var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-b7kr8 (ro)
Conditions:
  Type                        Status
  PodReadyToStartContainers   True 
  Initialized                 True 
  Ready                       True 
  ContainersReady             True 
  PodScheduled                True 
Volumes:
  webhook-cert:
    Type:        Secret (a volume populated by a Secret)
    SecretName:  ingress-nginx-admission
    Optional:    false
  kube-api-access-b7kr8:
    Type:                    Projected (a volume that contains injected data from multiple sources)
    TokenExpirationSeconds:  3607
    ConfigMapName:           kube-root-ca.crt
    ConfigMapOptional:       <nil>
    DownwardAPI:             true
QoS Class:                   Burstable
Node-Selectors:              kubernetes.io/os=linux
                             minikube.k8s.io/primary=true
Tolerations:                 node-role.kubernetes.io/master:NoSchedule
                             node.kubernetes.io/not-ready:NoExecute op=Exists for 300s
                             node.kubernetes.io/unreachable:NoExecute op=Exists for 300s
Events:                      <none>

5) $ kubectl describe pod esgf-search-599b64bb5f-j2mdn

Name:             esgf-search-599b64bb5f-j2mdn
Namespace:        default
Priority:         0
Service Account:  default
Node:             minikube/192.168.49.2
Start Time:       Fri, 11 Oct 2024 14:16:33 +0200
Labels:           app.kubernetes.io/component=search
                  app.kubernetes.io/instance=esgf
                  app.kubernetes.io/name=esgf
                  pod-template-hash=599b64bb5f
Annotations:      checksum/configmap: eb239daaa8cf69fbd46028e26ffe6d57a12f47e5b9fa5f3e145af5678b08f2af
Status:           Running
IP:               10.244.0.227
IPs:
  IP:           10.244.0.227
Controlled By:  ReplicaSet/esgf-search-599b64bb5f
Containers:
  search:
    Container ID:   docker://63a4840a5984d20878dbd20a7d191acd17b74dd82c4fb79ae3f6e97708aaf9f7
    Image:          esgfdeploy/search:latest
    Image ID:       docker-pullable://esgfdeploy/search@sha256:9df241cce3671e2e1ca0ca71eb569e1afa125e3283de64c1f52ba56679746a46
    Port:           8080/TCP
    Host Port:      0/TCP
    State:          Running
      Started:      Tue, 15 Oct 2024 07:23:01 +0200
    Last State:     Terminated
      Reason:       Error
      Exit Code:    143
      Started:      Mon, 14 Oct 2024 11:46:31 +0200
      Finished:     Mon, 14 Oct 2024 16:31:42 +0200
    Ready:          True
    Restart Count:  2
    Liveness:       http-get http://:8080/esg-search/search delay=120s timeout=1s period=10s #success=1 #failure=3
    Readiness:      http-get http://:8080/esg-search/search delay=10s timeout=1s period=10s #success=1 #failure=3
    Environment:    <none>
    Mounts:
      /esg/config from esg-config (ro)
      /var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-hx284 (ro)
Conditions:
  Type                        Status
  PodReadyToStartContainers   True 
  Initialized                 True 
  Ready                       True 
  ContainersReady             True 
  PodScheduled                True 
Volumes:
  esg-config:
    Type:      ConfigMap (a volume populated by a ConfigMap)
    Name:      esgf-search
    Optional:  false
  kube-api-access-hx284:
    Type:                    Projected (a volume that contains injected data from multiple sources)
    TokenExpirationSeconds:  3607
    ConfigMapName:           kube-root-ca.crt
    ConfigMapOptional:       <nil>
    DownwardAPI:             true
QoS Class:                   BestEffort
Node-Selectors:              <none>
Tolerations:                 node.kubernetes.io/not-ready:NoExecute op=Exists for 300s
                             node.kubernetes.io/unreachable:NoExecute op=Exists for 300s
Events:                      <none>
k8s-ci-robot commented 4 hours ago

This issue is currently awaiting triage.

If Ingress contributors determines this is a relevant issue, they will accept it by applying the triage/accepted label and provide further guidance.

The triage/accepted label can be added by org members by writing /triage accepted in a comment.

Instructions for interacting with me using PR comments are available [here](https://git.k8s.io/community/contributors/guide/pull-requests.md). If you have questions or suggestions related to my behavior, please file an issue against the [kubernetes-sigs/prow](https://github.com/kubernetes-sigs/prow/issues/new?title=Prow%20issue:) repository.
longwuyuan commented 2 hours ago 
    Last State:     Terminated
      Reason:       Error
      Exit Code:    143
      Started:      Mon, 14 Oct 2024 11:46:31 +0200
      Finished:     Mon, 14 Oct 2024 16:31:42 +0200
Unexpected error validating SSL certificate "default/esgf-hostcert" for server "192.168.49.2.nip.io": x509: certificate relies on legacy Common Name field, use SANs instead

/kind support

longwuyuan commented 2 hours ago

whatever word applies because there is no curl command with -iv and its response, posted here, to know exactly what is wrong