You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@yunikorn.apache.org by "Chia-Ping Tsai (Jira)" <ji...@apache.org> on 2021/07/21 17:01:00 UTC
[jira] [Commented] (YUNIKORN-726) Quick start results in admission
controller crashloop back off.
[ https://issues.apache.org/jira/browse/YUNIKORN-726?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17384998#comment-17384998 ]
Chia-Ping Tsai commented on YUNIKORN-726:
-----------------------------------------
I met the similar issue in k8s 1.19, 1.20 and 1.21. By contrast, k8s 1.18 works well. The way I tested is to enter following commands.
{code}
kubectl create namespace yunikorn
helm install yunikorn yunikorn/yunikorn --namespace yunikorn
{code}
The admission-controller can't start and the error message is shown below.
{code}
2021-07-21T16:56:20.754Z FATAL webhook/webhook.go:56 Failed to load key pair {"error": "tls: failed to find any PEM data in certificate input"}
main.main
/Users/boyuan/go/src/yunikorn-release-v0.10.0/incubator-yunikorn-release/staging/apache-yunikorn-0.10.0-incubating-src/k8shim/pkg/plugin/admissioncontrollers/webhook/webhook.go:56
runtime.main
/Users/boyuan/go/install/go1.14.14/src/runtime/proc.go:203
{code}
{quote}
I suggest to use K8s 1.19 version.
{quote}
[~kmarton] Could you please correct me if I misunderstood anything.
> Quick start results in admission controller crashloop back off.
> ---------------------------------------------------------------
>
> Key: YUNIKORN-726
> URL: https://issues.apache.org/jira/browse/YUNIKORN-726
> Project: Apache YuniKorn
> Issue Type: Improvement
> Reporter: Holden Karau
> Priority: Major
> Labels: pull-request-available
>
> Following the quick start guide at [https://yunikorn.apache.org/docs/] the admission controller fails start with an error indicating that it can't read the PEM data in the certificate input. Looking at the webhook-server-tls there is data in the key.pem but not cert.pem.
>
> It looks like it does generate a certificate signing request:
>
> {code:java}
> (base) holden@hkdesktop:~/repos/incubator-yunikorn-k8shim$ kubectl describe certificatesigningrequest --all-namespaces
> Name: yunikorn-admission-controller-service.yunikorn
> Labels: <none>
> Annotations: <none>
> CreationTimestamp: Wed, 23 Jun 2021 16:03:43 -0700
> Requesting User: system:serviceaccount:yunikorn:yunikorn-admin
> Signer: kubernetes.io/legacy-unknown
> Status: Pending
> Subject:
> Common Name: yunikorn-admission-controller-service.yunikorn.svc
> Serial Number:
> Subject Alternative Names:
> DNS Names: yunikorn-admission-controller-service
> yunikorn-admission-controller-service.yunikorn
> yunikorn-admission-controller-service.yunikorn.svc
> Events: <none>{code}
>
> This is on K3s 1.21
>
> {code:java}
> 2021-06-23T23:09:33.107Z INFO log/logger.go:93 scheduler configuration, pretty print {"configs": "{\n \"clusterId\": \"my-kube-cluster\",\n \"clusterVersion\": \"0.1\",\n \"policyGroup\": \"queues\",\n \"schedulingIntervalSecond\": 1000000000,\n \"absoluteKubeConfigFilePath\": \"\",\n \"loggingLevel\": 0,\n \"logEncoding\": \"console\",\n \"logFilePath\": \"\",\n \"volumeBindTimeout\": 10000000000,\n \"testMode\": false,\n \"eventChannelCapacity\": 1048576,\n \"dispatchTimeout\": 300000000000,\n \"kubeQPS\": 1000,\n \"kubeBurst\": 1000,\n \"predicates\": \"\",\n \"operatorPlugins\": \"general,yunikorn-app\",\n \"enableConfigHotRefresh\": false\n}"}2021-06-23T23:09:33.107Z INFO log/logger.go:93 scheduler configuration, pretty print {"configs": "{\n \"clusterId\": \"my-kube-cluster\",\n \"clusterVersion\": \"0.1\",\n \"policyGroup\": \"queues\",\n \"schedulingIntervalSecond\": 1000000000,\n \"absoluteKubeConfigFilePath\": \"\",\n \"loggingLevel\": 0,\n \"logEncoding\": \"console\",\n \"logFilePath\": \"\",\n \"volumeBindTimeout\": 10000000000,\n \"testMode\": false,\n \"eventChannelCapacity\": 1048576,\n \"dispatchTimeout\": 300000000000,\n \"kubeQPS\": 1000,\n \"kubeBurst\": 1000,\n \"predicates\": \"\",\n \"operatorPlugins\": \"general,yunikorn-app\",\n \"enableConfigHotRefresh\": false\n}"}2021-06-23T23:09:33.107Z FATAL webhook/webhook.go:56 Failed to load key pair {"error": "tls: failed to find any PEM data in certificate input"}main.main /Users/boyuan/go/src/yunikorn-release-v0.10.0/incubator-yunikorn-release/staging/apache-yunikorn-0.10.0-incubating-src/k8shim/pkg/plugin/admissioncontrollers/webhook/webhook.go:56runtime.main /Users/boyuan/go/install/go1.14.14/src/runtime/proc.go:203{code}
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@yunikorn.apache.org
For additional commands, e-mail: issues-help@yunikorn.apache.org