[slack-digest] [2020-10-09] #kubernetes

[OpenWhisk Team Slack <ra...@apache.org>]

2020-10-09 00:38:20 UTC - Mike Ludwig: Getting some SSL errors on the controller, and when creating an alarm trigger. Details in thread. Any help appreciated.
https://openwhisk-team.slack.com/archives/C4J3R7JFL/p1602203900009800?thread_ts=1602203900.009800&cid=C4J3R7JFL
----
2020-10-09 00:38:57 UTC - Mike Ludwig: When running this command
```wsk trigger create getvolumes-trigger --feed /whisk.system/alarms/alarm --param cron '0 * * * *'```
I get this error in the response:
```"response": {
    "result": {
        "error": {
            "code": "ENOTFOUND",
            "errno": "ENOTFOUND",
            "host": "https",
            "hostname": "https",
            "message": "getaddrinfo ENOTFOUND https https:443",
            "name": "Error",
            "port": 443,
            "stack": "Error: getaddrinfo ENOTFOUND https https:443\n    at errnoException (dns.js:28:10)\n    at GetAddrInfoReqWrap.onlookup [as oncomplete] (dns.js:76:26)",
           "syscall": "getaddrinfo"
         }
    },
    "size": 344,
    "status": "application error",
    "success": false
},```
https://openwhisk-team.slack.com/archives/C4J3R7JFL/p1602203937009900?thread_ts=1602203900.009800&cid=C4J3R7JFL
----
2020-10-09 00:41:25 UTC - Mike Ludwig: Additionally, I see this SSL handshake error in the logs of the openwhisk-controller-0 pod:
```[2020-10-09T00:22:41.102Z] [INFO] Querying for pods with label selector: [name=openwhisk-controller]. Namespace: [openwhisk]. Port: [None]
[2020-10-09T00:22:41.177Z] [WARN] Resolve attempt failed! Cause: javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure```
The only thing configured to use SSL in the setup is an AWS ALB that points to the K8s ingress.
https://openwhisk-team.slack.com/archives/C4J3R7JFL/p1602204085010100?thread_ts=1602203900.009800&cid=C4J3R7JFL
----
2020-10-09 00:46:48 UTC - Mike Ludwig: Helm config:
```whisk:
  ingress:
    domain: redacted
    apiHostName: redacted
    apiHostPort: 443
    apiHostProto: https
    type: Standard
    # annotations:
    #   <http://traefik.ingress.kubernetes.io/router.entrypoints|traefik.ingress.kubernetes.io/router.entrypoints>: websecure
    #   <http://traefik.ingress.kubernetes.io/router.tls|traefik.ingress.kubernetes.io/router.tls>: "true"
  auth:
    system: "redacted"
    guest: "redacted"
  containerPool:
    userMemory: "10240m"
  limits:
    actionsInvokesConcurrent: 200
    actionsInvokesPerminute: 200
    triggersFiresPerminute: 200
    actions:
      time:
        max: "60m"
      memory:
        max: "8192m"
      concurrency:
        max: 4

k8s:
  dns: kube-dns.kube-system

docker:
  registry:
    name: "redacted"
    username: "redacted"
    password: "redacted"

zookeeper:
  replicaCount: 3

kafka:
  replicaCount: 3

db:
  external: true
  wipeAndInit: true
  protocol: "http"
  host: "couchdb-svc-couchdb.couchdb.svc.cluster.local"
  port: 5984
  auth:
    username: "redacted"
    password: "redacted"

nginx:
  httpsNodePort: 443
  replicaCount: 3

controller:
  replicaCount: 3

invoker:
  jvmHeapMB: "2048"
  containerFactory:
    impl: "docker"
    enableConcurrency: true```
https://openwhisk-team.slack.com/archives/C4J3R7JFL/p1602204408010300?thread_ts=1602203900.009800&cid=C4J3R7JFL
----
2020-10-09 05:50:35 UTC - Keerthi Kumar S R: hostname is missing here
```https:443```

https://openwhisk-team.slack.com/archives/C4J3R7JFL/p1602222635010600?thread_ts=1602203900.009800&cid=C4J3R7JFL
----
2020-10-09 05:51:43 UTC - Keerthi Kumar S R: make sure this part of config is correct

```whisk:
  ingress:
    domain: redacted
    apiHostName: redacted```

https://openwhisk-team.slack.com/archives/C4J3R7JFL/p1602222703010800?thread_ts=1602203900.009800&cid=C4J3R7JFL
----