sassoftware / viya4-ark

SAS Viya Administration Resource Kit for Containerized Deployments. Tools and utilities to help SAS Customers with SAS Viya running in containers.
Apache License 2.0
33 stars 13 forks source link

Pre-install report WARNING: WARN: Review Namespace Permissions #196

Closed sasbxs closed 1 year ago

sasbxs commented 1 year ago

Using version 1.9.3 to prepare to deploy 2023.05 on AKS. I have used the Viya4-iac-azure project for provisioning. I don't see any errors in the log, other than this warning at the very end. Has the entire pre_install_check run? Did it bail out when the warning occurred? Although the command output doesn't mention any problems, I do see this warning at the end of the actual log. Is this something to be concerned about?

python3 viya-ark.py pre-install-report --ingress nginx --namespace agtech2 --host agtech2-viya4.eastus2.cloudapp.azure.com --port 443 Gathering facts...................................DONE

Created: /home/azureuser/deployments/agtech2/viya4-ark/viya_pre_install_report_2023-05-25T19_03_26.html Created: viya_pre_install_log_2023-05-25T19_03_26.log

2023-05-25 19:03:27,186 - pre_install_check.py[line:883] - INFO: cpu_cores cpu 8.0 2023-05-25 19:03:27,187 - pre_install_check.py[line:836] - INFO: worker total_cpu_cores 112.0 2023-05-25 19:03:27,188 - pre_install_check.py[line:674] - INFO: percent 85 percent of instance 380.8 G total capacity 876.4658647040002 G 2023-05-25 19:03:27,188 - pre_install_check.py[line:675] - INFO: input memory converted to G 448 G 2023-05-25 19:03:27,711 - pre_install_utils.py[line:60] - INFO: deploy_manifest_file rc 0 action apply filepath /home/azureuser/deployments/agtech 2/viya4-ark/pre_install_report/library/utils/hello-application.yaml datab'service/hello-world created\ndeployment.apps/hello-world created\n' 2023-05-25 19:03:37,795 - pre_install_utils.py[line:76] - INFO: cmd rollout status deployment.v1.apps/hello-world --timeout=180s rc = 0 2023-05-25 19:03:37,921 - pre_install_utils.py[line:76] - INFO: cmd scale --replicas=2 deployment/hello-world rc = 0 2023-05-25 19:03:38,209 - pre_install_utils.py[line:60] - INFO: deploy_manifest_file rc 0 action apply filepath /home/azureuser/deployments/agtech 2/viya4-ark/pre_install_report/library/utils/hello-ingress.yaml datab'ingress.networking.k8s.io/hello-world created\n' 2023-05-25 19:03:38,479 - pre_install_utils.py[line:60] - INFO: deploy_manifest_file rc 0 action apply filepath /home/azureuser/deployments/agtech 2/viya4-ark/pre_install_report/library/utils/crdviya.yaml datab'customresourcedefinition.apiextensions.k8s.io/viyas.company.com created\n' 2023-05-25 19:03:38,758 - pre_install_utils.py[line:60] - INFO: deploy_manifest_file rc 0 action apply filepath /home/azureuser/deployments/agtech 2/viya4-ark/pre_install_report/library/utils/viya-role.yaml datab'role.rbac.authorization.k8s.io/viyasrole created\n' 2023-05-25 19:03:39,016 - pre_install_utils.py[line:60] - INFO: deploy_manifest_file rc 0 action apply filepath /home/azureuser/deployments/agtech 2/viya4-ark/pre_install_report/library/utils/crservice_acct.yaml datab'serviceaccount/crreader created\n' 2023-05-25 19:03:40,051 - pre_install_utils.py[line:60] - INFO: deploy_manifest_file rc 0 action apply filepath /home/azureuser/deployments/agtech 2/viya4-ark/pre_install_report/library/utils/viya-rolebinding.yaml datab'rolebinding.rbac.authorization.k8s.io/viyasrolebinding created\n' 2023-05-25 19:03:40,447 - pre_install_utils.py[line:60] - INFO: deploy_manifest_file rc 0 action apply filepath /home/azureuser/deployments/agtech 2/viya4-ark/pre_install_report/library/utils/crviya.yaml datab'viya.company.com/testcr created\n' 2023-05-25 19:03:40,621 - pre_install_utils.py[line:118] - INFO: can -i True can-i create viyas.company.com --as=system:serviceaccount:agtech2:crr eader 2023-05-25 19:03:40,805 - pre_install_utils.py[line:118] - INFO: can -i False can-i delete viyas.company.com --as=system:serviceaccount:agtech2:cr reader 2023-05-25 19:03:40,926 - pre_install_utils.py[line:60] - INFO: deploy_manifest_file rc 0 action delete filepath /home/azureuser/deployments/agtec h2/viya4-ark/pre_install_report/library/utils/crviya.yaml datab'viya.company.com "testcr" deleted\n' 2023-05-25 19:03:41,045 - pre_install_utils.py[line:60] - INFO: deploy_manifest_file rc 0 action delete filepath /home/azureuser/deployments/agtec h2/viya4-ark/pre_install_report/library/utils/viya-role.yaml datab'role.rbac.authorization.k8s.io "viyasrole" deleted\n' 2023-05-25 19:03:41,170 - pre_install_utils.py[line:60] - INFO: deploy_manifest_file rc 0 action delete filepath /home/azureuser/deployments/agtec h2/viya4-ark/pre_install_report/library/utils/viya-rolebinding.yaml datab'rolebinding.rbac.authorization.k8s.io "viyasrolebinding" deleted\n' 2023-05-25 19:03:41,296 - pre_install_utils.py[line:60] - INFO: deploy_manifest_file rc 0 action delete filepath /home/azureuser/deployments/agtec h2/viya4-ark/pre_install_report/library/utils/crservice_acct.yaml datab'serviceaccount "crreader" deleted\n' 2023-05-25 19:03:41,296 - pre_install_check_permissions.py[line:515] - INFO: url http://agtech2-viya4.eastus2.cloudapp.azure.com:443/hello-world 2023-05-25 19:03:41,342 - pre_install_check_permissions.py[line:535] - INFO: url https://agtech2-viya4.eastus2.cloudapp.azure.com:443/hello-world re sponse status code 200 2023-05-25 19:03:41,567 - pre_install_utils.py[line:60] - INFO: deploy_manifest_file rc 0 action delete filepath /home/azureuser/deployments/agtec h2/viya4-ark/pre_install_report/library/utils/crdviya.yaml datab'customresourcedefinition.apiextensions.k8s.io "viyas.company.com" deleted\n' 2023-05-25 19:03:41,720 - pre_install_utils.py[line:60] - INFO: deploy_manifest_file rc 0 action delete filepath /home/azureuser/deployments/agtec h2/viya4-ark/pre_install_report/library/utils/hello-application.yaml datab'service "hello-world" deleted\ndeployment.apps "hello-world" deleted\n' 2023-05-25 19:04:05,852 - pre_install_utils.py[line:82] - ERROR: do_cmd rc = 1 wait --for=delete pod -l app=hello-world-pod --timeout=12s data = b '' 2023-05-25 19:04:06,001 - pre_install_utils.py[line:60] - INFO: deploy_manifest_file rc 0 action delete filepath /home/azureuser/deployments/agtec h2/viya4-ark/pre_install_report/library/utils/hello-ingress.yaml datab'ingress.networking.k8s.io "hello-world" deleted\n' 2023-05-25 19:04:06,007 - pre_install_check.py[line:218] - WARNING: WARN: Review Namespace Permissions

lasiva commented 1 year ago

The report ran successfully to the end. The warning may be benign, but we can check it out.

Please add the --debug option to your command line and re-run the command. Attach the log as well as the html report that is generated to the issue.

Thank you.

sasbxs commented 1 year ago

viya_pre_install_log_2023-05-25T19_40_54.log I will email you the html directly, as it does not appear to be a type that I'm allowed to upload here.

sasbxs commented 1 year ago

Here is the html file that I couldn't directly attach to my comment in github. It looks like everything is ok to me.

Brian

From: Latha Sivakumar @.> Sent: Thursday, May 25, 2023 3:38 PM To: sassoftware/viya4-ark @.> Cc: Brian Stratton @.>; Author @.> Subject: Re: [sassoftware/viya4-ark] Pre-install report WARNING: WARN: Review Namespace Permissions (Issue #196)

You don't often get email from @.**@.>. Learn why this is importanthttps://aka.ms/LearnAboutSenderIdentification

EXTERNAL

The report ran successfully to the end. The warning may be benign, but we can check it out.

Please add the --debug option to your command line and re-run the command. Attach the log as well as the html report that is generated to the issue.

Thank you.

- Reply to this email directly, view it on GitHubhttps://github.com/sassoftware/viya4-ark/issues/196#issuecomment-1563414959, or unsubscribehttps://github.com/notifications/unsubscribe-auth/ARR6DGJEADEXMOXTWMATIITXH6YK3ANCNFSM6AAAAAAYPI6PWE. You are receiving this because you authored the thread.Message ID: @.**@.>>

lasiva commented 1 year ago

I did not find any issues in the debug log. Since you used Viya4-iac-azure project, There should be any major problems because you used the Viya4-iac-azure project.

There were no attachments with your email. In the html file expand all the folders for any warning messages you may have missed.

lasiva commented 1 year ago

Html report looks good too! I will look into that specific WARNING message and see why it appeared. But at this point you can proceed with your tasks. I don't see any show stoppers.

kevinlinglesas commented 1 year ago

Is the "- ERROR: do_cmd rc = 1 wait --for=delete pod -l app=hello-world-pod --timeout=12s data = b'' of no concern as well? Seems like the hello-world pod is getting deleted, but maybe some timing or something here?

erharb commented 1 year ago

It could just be that it too longer than 12 seconds to delete the pod and timed out, or maybe never deleted the pod

lasiva commented 1 year ago

We wait for the sample pod to delete and this message is logged if pod is not deleted immediately.

kevinlinglesas commented 1 year ago

This warning is thought to be a reflection of some timing issue with the prior pod deletion (see discussion). Additionally, the associated feature of the pre-install report is going to be removed in the near future (#200), so there will be no changes related to this issue forthcoming. As a result, I'm closing this issue.