search

oracle / terraform-kubernetes-installer

Terraform Installer for Kubernetes on Oracle Cloud Infrastructure
Other
179 stars 118 forks source link

k8s clusters missing requestheader-client-ca-file #74

Open pravarsh opened 6 years ago

pravarsh commented 6 years ago

I am trying to install the kubernetes service-catalog into the k8s 1.7.4 provisioned by BMC terraform. The link for installing service catalog is https://github.com/kubernetes-incubator/service-catalog/blob/master/docs/install.md I am getting Error: cluster doesn't provide requestheader-client-ca-file

Azure's acs-engine also had the same issue and they fixed it. The link for that issue is Azure/acs-engine#1390

pravarsh commented 6 years ago

Exact steps that I followed are :

$ helm reset --remove-helm-home
Deleting /home/pravarsh/.helm 
Tiller (the Helm server-side component) has been uninstalled from your Kubernetes Cluster.
$ helm init
Creating /home/pravarsh/.helm 
Creating /home/pravarsh/.helm/repository 
Creating /home/pravarsh/.helm/repository/cache 
Creating /home/pravarsh/.helm/repository/local 
Creating /home/pravarsh/.helm/plugins 
Creating /home/pravarsh/.helm/starters 
Creating /home/pravarsh/.helm/cache/archive 
Creating /home/pravarsh/.helm/repository/repositories.yaml 
Adding stable repo with URL: https://kubernetes-charts.storage.googleapis.com 
Adding local repo with URL: http://127.0.0.1:8879/charts 
$HELM_HOME has been configured at /home/pravarsh/.helm.

Tiller (the Helm server-side component) has been installed into your Kubernetes Cluster.
Happy Helming!
$ kubectl version
Client Version: version.Info{Major:"1", Minor:"8", GitVersion:"v1.8.4", GitCommit:"9befc2b8928a9426501d3bf62f72849d5cbcd5a3", GitTreeState:"clean", BuildDate:"2017-11-20T05:28:34Z", GoVersion:"go1.8.3", Compiler:"gc", Platform:"linux/amd64"}
Server Version: version.Info{Major:"1", Minor:"7", GitVersion:"v1.7.4+coreos.0", GitCommit:"4bb697e04f7c356347aee6ffaa91640b428976d5", GitTreeState:"clean", BuildDate:"2017-08-22T08:43:47Z", GoVersion:"go1.8.3", Compiler:"gc", Platform:"linux/amd64"}

$ helm version
Client: &version.Version{SemVer:"v2.7.2", GitCommit:"8478fb4fc723885b155c924d1c8c410b7a9444e6", GitTreeState:"clean"}
Server: &version.Version{SemVer:"v2.7.2", GitCommit:"8478fb4fc723885b155c924d1c8c410b7a9444e6", GitTreeState:"clean"}
$ helm repo add svc-cat https://svc-catalog-charts.storage.googleapis.com
"svc-cat" has been added to your repositories

$ helm search service-catalog
NAME            VERSION DESCRIPTION                                       
svc-cat/catalog 0.1.3   service-catalog API server and controller-manag...

$ kubectl create clusterrolebinding tiller-cluster-admin      --clusterrole=cluster-admin      --serviceaccount=kube-system:default
clusterrolebinding "tiller-cluster-admin" created
$ helm install svc-cat/catalog      --name catalog --namespace catalog
NAME:   catalog
LAST DEPLOYED: Fri Dec 15 19:11:33 2017
NAMESPACE: catalog
STATUS: DEPLOYED

RESOURCES:
==> v1/Pod(related)
NAME                                                READY  STATUS             RESTARTS  AGE
catalog-catalog-apiserver-1510283584-c0jwc          0/2    ContainerCreating  0         5s
catalog-catalog-controller-manager-639360622-29hf6  0/1    ContainerCreating  0         5s

==> v1/Secret
NAME                            TYPE    DATA  AGE
catalog-catalog-apiserver-cert  Opaque  2     6s

==> v1/Service
NAME                       TYPE      CLUSTER-IP    EXTERNAL-IP  PORT(S)        AGE
catalog-catalog-apiserver  NodePort  10.21.149.69  <none>       443:30443/TCP  6s

==> v1beta1/RoleBinding
NAME                                                   AGE
servicecatalog.k8s.io:apiserver-authentication-reader  6s
service-catalog-controller-manager                     6s

==> v1beta1/Role
NAME                                                     AGE
servicecatalog.k8s.io:leader-locking-controller-manager  6s

==> v1/ServiceAccount
NAME                                SECRETS  AGE
service-catalog-apiserver           1        6s
service-catalog-controller-manager  1        6s

==> v1beta1/Deployment
NAME                                DESIRED  CURRENT  UP-TO-DATE  AVAILABLE  AGE
catalog-catalog-apiserver           1        1        1           0          6s
catalog-catalog-controller-manager  1        1        1           0          6s

==> v1beta1/APIService
NAME                           AGE
v1beta1.servicecatalog.k8s.io  6s

==> v1beta1/ClusterRole
servicecatalog.k8s.io:apiserver           6s
servicecatalog.k8s.io:controller-manager  6s

==> v1beta1/ClusterRoleBinding
NAME                                            AGE
servicecatalog.k8s.io:apiserver                 6s
servicecatalog.k8s.io:apiserver-auth-delegator  6s
servicecatalog.k8s.io:controller-manager        6s
$ helm ls
NAME    REVISION    UPDATED                     STATUS      CHART           NAMESPACE
catalog 1           Fri Dec 15 19:11:33 2017    DEPLOYED    catalog-0.1.3   catalog  
$ kubectl get pods -n catalog
NAME                                                 READY     STATUS             RESTARTS   AGE
catalog-catalog-apiserver-1510283584-c0jwc           1/2       Running            1          44s
catalog-catalog-controller-manager-639360622-29hf6   0/1       CrashLoopBackOff   1          44s
$ kubectl logs catalog-catalog-apiserver-1510283584-c0jwc -c apiserver -n catalog
I1215 13:43:22.532071      65 run_server.go:59] Preparing to run API server
I1215 13:43:26.836662      65 round_trippers.go:417] curl -k -v -XGET  -H "Accept: application/json, */*" -H "User-Agent: service-catalog/v0.1.3 (linux/amd64) kubernetes/bb3e4a1" -H "Authorization: Bearer eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.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.YLeuyEhpf7DkPE_c-ETsBOhdqfWn-Yn02jNxf23CCapGiNIqVxb6vu_G21ockJ7xUaiNzGn34skfZFtLyX7H-WfKywX9Hwm3g4opafVjSzD_pfcvjMamnTaNiYEgK0lRh-SHCY-elnrYwzQxSETrOHgNJUnePiGN5TPuorvRNwtC0WI46sJ5z-r8otOvUSBt0T_izRJck6LZ1tPYvKqZkgMlnOSQPOGqVjC2QNKQGyMmfbV20lnbnmpcp1U5D2TP6lQrtv42sTAwiAcyp6fT5nBOw5ryp3xU1Ew5tQ4LgYrYJ4EHZUM6XASEzJovn4SJNUFGzKhNCU4MFx7hBNb9BQ" https://10.21.0.1:443/api/v1/namespaces/kube-system/configmaps/extension-apiserver-authentication
I1215 13:43:26.991761      65 round_trippers.go:436] GET https://10.21.0.1:443/api/v1/namespaces/kube-system/configmaps/extension-apiserver-authentication 200 OK in 155 milliseconds
I1215 13:43:26.991797      65 round_trippers.go:442] Response Headers:
I1215 13:43:26.991805      65 round_trippers.go:445]     Content-Type: application/json
I1215 13:43:26.991811      65 round_trippers.go:445]     Content-Length: 1493
I1215 13:43:26.991816      65 round_trippers.go:445]     Date: Fri, 15 Dec 2017 13:43:26 GMT
I1215 13:43:26.991870      65 request.go:836] Response Body: {"kind":"ConfigMap","apiVersion":"v1","metadata":{"name":"extension-apiserver-authentication","namespace":"kube-system","selfLink":"/api/v1/namespaces/kube-system/configmaps/extension-apiserver-authentication","uid":"d7be70c1-d9b3-11e7-86f5-00001700cffa","resourceVersion":"6","creationTimestamp":"2017-12-05T12:00:10Z"},"data":{"client-ca-file":"-----BEGIN CERTIFICATE-----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\n6GmtYw2da9Rvnq8ToAO7hkG/bKs=\n-----END CERTIFICATE-----\n"}}
I1215 13:43:26.994951      65 round_trippers.go:417] curl -k -v -XGET  -H "Accept: application/json, */*" -H "User-Agent: service-catalog/v0.1.3 (linux/amd64) kubernetes/bb3e4a1" -H "Authorization: Bearer eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.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.YLeuyEhpf7DkPE_c-ETsBOhdqfWn-Yn02jNxf23CCapGiNIqVxb6vu_G21ockJ7xUaiNzGn34skfZFtLyX7H-WfKywX9Hwm3g4opafVjSzD_pfcvjMamnTaNiYEgK0lRh-SHCY-elnrYwzQxSETrOHgNJUnePiGN5TPuorvRNwtC0WI46sJ5z-r8otOvUSBt0T_izRJck6LZ1tPYvKqZkgMlnOSQPOGqVjC2QNKQGyMmfbV20lnbnmpcp1U5D2TP6lQrtv42sTAwiAcyp6fT5nBOw5ryp3xU1Ew5tQ4LgYrYJ4EHZUM6XASEzJovn4SJNUFGzKhNCU4MFx7hBNb9BQ" https://10.21.0.1:443/api/v1/namespaces/kube-system/configmaps/extension-apiserver-authentication
I1215 13:43:26.997321      65 round_trippers.go:436] GET https://10.21.0.1:443/api/v1/namespaces/kube-system/configmaps/extension-apiserver-authentication 200 OK in 2 milliseconds
I1215 13:43:26.997358      65 round_trippers.go:442] Response Headers:
I1215 13:43:26.997365      65 round_trippers.go:445]     Content-Length: 1493
I1215 13:43:26.997371      65 round_trippers.go:445]     Date: Fri, 15 Dec 2017 13:43:26 GMT
I1215 13:43:26.997376      65 round_trippers.go:445]     Content-Type: application/json
I1215 13:43:26.997422      65 request.go:836] Response Body: {"kind":"ConfigMap","apiVersion":"v1","metadata":{"name":"extension-apiserver-authentication","namespace":"kube-system","selfLink":"/api/v1/namespaces/kube-system/configmaps/extension-apiserver-authentication","uid":"d7be70c1-d9b3-11e7-86f5-00001700cffa","resourceVersion":"6","creationTimestamp":"2017-12-05T12:00:10Z"},"data":{"client-ca-file":"-----BEGIN CERTIFICATE-----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\n6GmtYw2da9Rvnq8ToAO7hkG/bKs=\n-----END CERTIFICATE-----\n"}}
Error: cluster doesn't provide requestheader-client-ca-file
jlamillan commented 6 years ago

Thanks for the bug report, we'll take a look and report back.