vmware-archive / photon-controller

Photon Controller
Other
26 stars 4 forks source link

Photon Controller SSLEngine error / IPv6 binding #117

Closed Koch closed 7 years ago

Koch commented 7 years ago

Deploying freshly with the latest OVA for the installer. Run with the following config for controllers:

photon:
  imagestore:
    img-store-1:
      hostref: "host1"
      datastore: "storage1"
      enableimagestoreforvms: "true"
  cloud:
    hostref1: "host1"
  administrator-group: "pht.local\\Administrators"
  controllers:
    "phtctl-001":
      appliance:
        hostref: "host1"
        datastore: "storage1" 
        credential:
          username: "root"
          password: "rootpw"
        network-config:
          network: "NAT=VM Network"
          type: "static"
          hostname: phtctl-001.pht.local
          ipaddress: 10.243.89.22
          netmask: 255.255.255.0
          dns: 10.243.89.21
          ntp: 10.1.6.1
          gateway: 10.243.89.23

However, when it gets to the provisioning host stage:

2017-05-08 07:34:20 INFO  Provisioning the host to change its state to READY
2017-05-08 07:35:29 ERROR Failed in provisioning host: host1
java.lang.RuntimeException: Task failed to provide correct state ERROR

Installer logs say the following:

2017-05-08 07:35:15 DEBUG ControllerInstaller:745 - https://10.243.89.22:9000/v1/tasks/6121c307-9fc0-4b99-87c7-685896de3911
2017-05-08 07:35:16 DEBUG ControllerInstaller:745 - https://10.243.89.22:9000/v1/tasks/6121c307-9fc0-4b99-87c7-685896de3911
2017-05-08 07:35:17 DEBUG ControllerInstaller:745 - https://10.243.89.22:9000/v1/tasks/6121c307-9fc0-4b99-87c7-685896de3911
2017-05-08 07:35:18 DEBUG ControllerInstaller:745 - https://10.243.89.22:9000/v1/tasks/6121c307-9fc0-4b99-87c7-685896de3911
2017-05-08 07:35:19 DEBUG ControllerInstaller:745 - https://10.243.89.22:9000/v1/tasks/6121c307-9fc0-4b99-87c7-685896de3911
2017-05-08 07:35:21 DEBUG ControllerInstaller:745 - https://10.243.89.22:9000/v1/tasks/6121c307-9fc0-4b99-87c7-685896de3911
2017-05-08 07:35:22 DEBUG ControllerInstaller:745 - https://10.243.89.22:9000/v1/tasks/6121c307-9fc0-4b99-87c7-685896de3911
2017-05-08 07:35:23 DEBUG ControllerInstaller:745 - https://10.243.89.22:9000/v1/tasks/6121c307-9fc0-4b99-87c7-685896de3911
2017-05-08 07:35:24 DEBUG ControllerInstaller:745 - https://10.243.89.22:9000/v1/tasks/6121c307-9fc0-4b99-87c7-685896de3911
2017-05-08 07:35:25 DEBUG ControllerInstaller:745 - https://10.243.89.22:9000/v1/tasks/6121c307-9fc0-4b99-87c7-685896de3911
2017-05-08 07:35:26 DEBUG ControllerInstaller:745 - https://10.243.89.22:9000/v1/tasks/6121c307-9fc0-4b99-87c7-685896de3911
2017-05-08 07:35:27 DEBUG ControllerInstaller:745 - https://10.243.89.22:9000/v1/tasks/6121c307-9fc0-4b99-87c7-685896de3911
2017-05-08 07:35:28 DEBUG ControllerInstaller:745 - https://10.243.89.22:9000/v1/tasks/6121c307-9fc0-4b99-87c7-685896de3911
2017-05-08 07:35:29 ERROR ControllerInstaller:550 - Failed in provisioning host: host1

I logged onto the Photon Controller VM and ran ip addr, that was fine. I'm unable to open a connection on port 9000, so I gave that up. However, upon running "netstat -tulpn", Java is bound to ::9000 rather than IPv4 (however I don't believe that matters in Linux either way(?)). Once I ruled that out (I changed the config whilst the VIBS were being installed and rebooted the controller to make it bind to 0.0.0.0:9000), I checked the logs of the controller.

Controller is complaining about SSL Engine errors, I can't paste the logs out as the console is being screwy and SSH isn't working, but it's a "General SSLEngine" error from Java.

Anyone seen this before, or any tips? I've tried redeploying on a freshly installed ESX several times now - even reinstalled the ESX first thinking that was the error. Note: I can reach the VM from both the host and other VMs on the network, as well as my management server.

Thanks!

mwest44 commented 7 years ago

can you post the complete config yaml file you used.

Koch commented 7 years ago

Of course!

compute:
  hypervisors:
    host1:
      hostname: host1
      ipaddress: 10.243.89.11
      dns: 10.1.1.1
      credential:
        username: root
        password: ServerPw42!
lightwave:
  domain: "pht.local"
  credential:
    username: "administrator"
    password: "AdminPw42!!"
  controllers:
    phtlw-001:
      site: u93b
      appliance:
        hostref: host1
        datastore: "ds1"
        credential:
          username: root
          password: ServerPw42!
        network-config:
          network: "NAT=VM Network"
          type: "static"
          hostname: phtlw-001.pht.local
          ipaddress: 10.243.89.21
          dns: 10.1.1.1
          ntp: 10.1.6.1
          netmask: 255.255.255.0
          gateway: 10.243.89.1
photon:
  imagestore:
    img-store-1:
      hostref: "host1"
      datastore: "ds1"
      enableimagestoreforvms: "true"
  cloud:
    hostref1: "host1"
  administrator-group: "pht.local\\Administrators"
  controllers:
    "phtctl-001":
      appliance:
        hostref: "host1"
        datastore: "ds1" 
        credential:
          username: "root"
          password: "ServerPw42!"
        network-config:
          network: "NAT=VM Network"
          type: "static"
          hostname: phtctl-001.pht.local
          ipaddress: 10.243.89.22
          netmask: 255.255.255.0
          dns: 10.243.89.21
          ntp: 10.1.1.1
          gateway: 10.243.89.1
loadBalancer:
  phtlb-001:
    appliance:
      hostref: host1
      datastore: "ds1"
      credential:
        username: "root"
        password: "ServerPw42!"
      network-config:
        network: "NAT=VM Network"
        type: "static"
        hostname: phtlb-001.pht.local
        ipaddress: 10.243.89.23
        netmask: 255.255.255.0
        dns: 10.243.89.21
        ntp: 10.1.1.1
        gateway: 10.243.89.1
mwest44 commented 7 years ago

dns of your host is set to your ntp server IP. It should be the IP of the LW VM 10.243.89.21

Koch commented 7 years ago

It was actually set to that to sanitize, but looking at my non-sanitized file it was set to something else either way. I'll try that out now, thanks!

Koch commented 7 years ago

That did it, many thanks! :)