You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@apisix.apache.org by GitBox <gi...@apache.org> on 2021/02/22 13:27:07 UTC

[GitHub] [apisix-ingress-controller] Bhanuji95 opened a new issue #259: request help: Getting route not found issue

Bhanuji95 opened a new issue #259:
URL: https://github.com/apache/apisix-ingress-controller/issues/259


   ### We are facing route not found issue with apisix ingress controller
   
   ### Development
   
   * apisix version: 2.2
   * OS: APISIX docker image (ubuntu)
   * OpenResty / Nginx version: openresty/1.19.3.1
   * etcd version: 3.4.8
   
   we have also added apisix route and upstream.
   


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



[GitHub] [apisix-ingress-controller] Bhanuji95 commented on issue #259: request help: Getting route not found issue

Posted by GitBox <gi...@apache.org>.
Bhanuji95 commented on issue #259:
URL: https://github.com/apache/apisix-ingress-controller/issues/259#issuecomment-784981162


   Hello @tokers,
   
   We have tried APISIX earlier, looks like the old ClusterRole didn't get update during re-deployment. Now we have created the role again with the latest configuration. Thanks for your help 👍  


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



[GitHub] [apisix-ingress-controller] tokers commented on issue #259: request help: Getting route not found issue

Posted by GitBox <gi...@apache.org>.
tokers commented on issue #259:
URL: https://github.com/apache/apisix-ingress-controller/issues/259#issuecomment-784648206


   @Bhanuji95 It seems your `ClusterRole` is obsolete, how did you get it? Anyway, try the newest one https://github.com/apache/apisix-ingress-controller/blob/master/charts/apisix-ingress-controller/templates/rbac.yaml :)


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



[GitHub] [apisix-ingress-controller] Bhanuji95 commented on issue #259: request help: Getting route not found issue

Posted by GitBox <gi...@apache.org>.
Bhanuji95 commented on issue #259:
URL: https://github.com/apache/apisix-ingress-controller/issues/259#issuecomment-785734676


   Hello @gxthrj,
   
   Our issue is resolved now, we can close the issue.


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



[GitHub] [apisix-ingress-controller] tokers commented on issue #259: request help: Getting route not found issue

Posted by GitBox <gi...@apache.org>.
tokers commented on issue #259:
URL: https://github.com/apache/apisix-ingress-controller/issues/259#issuecomment-783789352


   @Bhanuji95 How did you install apisix-ingress-controller and apisix?


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



[GitHub] [apisix-ingress-controller] Bhanuji95 commented on issue #259: request help: Getting route not found issue

Posted by GitBox <gi...@apache.org>.
Bhanuji95 commented on issue #259:
URL: https://github.com/apache/apisix-ingress-controller/issues/259#issuecomment-784148923


   Hello @tokers,
   
   we installed using docker images and followed official installation document, below are the details:
   
   etcd: quay.io/coreos/etcd:v3.4.8
   apisix-gw: apache/apisix:latest
   ingress: apache/apisix-ingress-controller:0.3.0
   


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



[GitHub] [apisix-ingress-controller] Bhanuji95 commented on issue #259: request help: Getting route not found issue

Posted by GitBox <gi...@apache.org>.
Bhanuji95 commented on issue #259:
URL: https://github.com/apache/apisix-ingress-controller/issues/259#issuecomment-784158872


   Hello @tokers,
   
   I am giving my serviceaccount, cluster role and role binding information here
   
   ```
   ---
   kind: ServiceAccount
   apiVersion: v1
   metadata:
     name: apisix-view-serviceaccount
     namespace: default
   secrets:
     - name: apisix-view-serviceaccount-token-hhmp4
   ---
   kind: ClusterRoleBinding
   apiVersion: rbac.authorization.k8s.io/v1
   metadata:
     name: apisix-view-clusterrolebinding
   subjects:
     - kind: ServiceAccount
       name: apisix-view-serviceaccount
       namespace: default
   roleRef:
     apiGroup: rbac.authorization.k8s.io
     kind: ClusterRole
     name: apisix-view-clusterrole
   ---
   kind: ClusterRole
   apiVersion: rbac.authorization.k8s.io/v1
   metadata:
     name: apisix-view-clusterrole
   rules:
     - verbs:
         - get
         - list
         - watch
       apiGroups:
         - ''
       resources:
         - configmaps
         - endpoints
         - persistentvolumeclaims
         - pods
         - replicationcontrollers
         - replicationcontrollers/scale
         - serviceaccounts
         - services
     - verbs:
         - get
         - list
         - watch
       apiGroups:
         - ''
       resources:
         - bindings
         - events
         - limitranges
         - namespaces/status
         - pods/log
         - pods/status
         - replicationcontrollers/status
         - resourcequotas
         - resourcequotas/status
     - verbs:
         - get
         - list
         - watch
       apiGroups:
         - ''
       resources:
         - namespaces
     - verbs:
         - get
         - list
         - watch
       apiGroups:
         - apps
       resources:
         - controllerrevisions
         - daemonsets
         - deployments
         - deployments/scale
         - replicasets
         - replicasets/scale
         - statefulsets
         - statefulsets/scale
     - verbs:
         - get
         - list
         - watch
       apiGroups:
         - autoscaling
       resources:
         - horizontalpodautoscalers
     - verbs:
         - get
         - list
         - watch
       apiGroups:
         - batch
       resources:
         - cronjobs
         - jobs
     - verbs:
         - get
         - list
         - watch
       apiGroups:
         - extensions
       resources:
         - daemonsets
         - deployments
         - deployments/scale
         - ingresses
         - networkpolicies
         - replicasets
         - replicasets/scale
         - replicationcontrollers/scale
     - verbs:
         - get
         - list
         - watch
       apiGroups:
         - policy
       resources:
         - poddisruptionbudgets
     - verbs:
         - get
         - list
         - watch
       apiGroups:
         - networking.k8s.io
       resources:
         - ingresses
         - networkpolicies
     - verbs:
         - get
         - list
         - watch
       apiGroups:
         - metrics.k8s.io
       resources:
         - pods
     - verbs:
         - get
         - list
         - watch
       apiGroups:
         - apisix.apache.org
       resources:
         - apisixroutes
         - apisixupstreams
         - apisixservices
   
   ```


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



[GitHub] [apisix-ingress-controller] tokers commented on issue #259: request help: Getting route not found issue

Posted by GitBox <gi...@apache.org>.
tokers commented on issue #259:
URL: https://github.com/apache/apisix-ingress-controller/issues/259#issuecomment-784150139


   It weird since the permission missing problem was fixed in `0.3.0`.


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



[GitHub] [apisix-ingress-controller] Bhanuji95 closed issue #259: request help: Getting route not found issue

Posted by GitBox <gi...@apache.org>.
Bhanuji95 closed issue #259:
URL: https://github.com/apache/apisix-ingress-controller/issues/259


   


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



[GitHub] [apisix-ingress-controller] Bhanuji95 commented on issue #259: request help: Getting route not found issue

Posted by GitBox <gi...@apache.org>.
Bhanuji95 commented on issue #259:
URL: https://github.com/apache/apisix-ingress-controller/issues/259#issuecomment-785007376


   Hi @tokers,
   
   One more query, is it possible to integrate APISIX with AzureAD/Azure OIDC authentication?


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



[GitHub] [apisix-ingress-controller] tokers commented on issue #259: request help: Getting route not found issue

Posted by GitBox <gi...@apache.org>.
tokers commented on issue #259:
URL: https://github.com/apache/apisix-ingress-controller/issues/259#issuecomment-784150858


   @Bhanuji95 Could you please paste the contents of the serviceaccount `apisix-view-serviceaccount`.


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



[GitHub] [apisix-ingress-controller] tokers commented on issue #259: request help: Getting route not found issue

Posted by GitBox <gi...@apache.org>.
tokers commented on issue #259:
URL: https://github.com/apache/apisix-ingress-controller/issues/259#issuecomment-784982686


   @Bhanuji95 You're welcome :).


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



[GitHub] [apisix-ingress-controller] gxthrj commented on issue #259: request help: Getting route not found issue

Posted by GitBox <gi...@apache.org>.
gxthrj commented on issue #259:
URL: https://github.com/apache/apisix-ingress-controller/issues/259#issuecomment-785572839


   @Bhanuji95  Has the problem of not finding the route been resolved? If so, we can close this issue.


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



[GitHub] [apisix-ingress-controller] Bhanuji95 commented on issue #259: request help: Getting route not found issue

Posted by GitBox <gi...@apache.org>.
Bhanuji95 commented on issue #259:
URL: https://github.com/apache/apisix-ingress-controller/issues/259#issuecomment-783411801


   Hello,
   
   Below is the ingress configuration I used.
   
   ## Upstream ##
   apiVersion: apisix.apache.org/v1
   kind: ApisixUpstream
   metadata:
     name: myapp
   spec:
     ports:
     - port: 80
       loadbalancer:
         type: chash
         hashOn: header
         key: 
   ---
   ## Route ##
   apiVersion: apisix.apache.org/v1
   kind: ApisixRoute
   metadata:
     name: myapp
   spec:
     rules:
     - host: localhost
       http:
         paths:
         - backend:
             serviceName: myservice
             servicePort: 80
           path: /path*
   
   A log from ingress controller says: E0222 22:24:19.709891 1 leaderelection.go:325] error retrieving resource lock default/ingress-apisix-leader: leases.coordination.k8s.io "ingress-apisix-leader" is forbidden: User "system:serviceaccount:default:apisix-view-serviceaccount" cannot get resource "leases" in API group "coordination.k8s.io" in the namespace "default"


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



[GitHub] [apisix-ingress-controller] tokers commented on issue #259: request help: Getting route not found issue

Posted by GitBox <gi...@apache.org>.
tokers commented on issue #259:
URL: https://github.com/apache/apisix-ingress-controller/issues/259#issuecomment-785024978


   > Hi @tokers,
   > 
   > 
   > 
   > One more query, is it possible to integrate APISIX with AzureAD/Azure OIDC authentication?
   
   Well, that depends on whether APISIX supports it. @spacewander @membphis 


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



[GitHub] [apisix-ingress-controller] membphis commented on issue #259: request help: Getting route not found issue

Posted by GitBox <gi...@apache.org>.
membphis commented on issue #259:
URL: https://github.com/apache/apisix-ingress-controller/issues/259#issuecomment-785511787


   @Bhanuji95 the APISIX does not support  AzureAD/Azure OIDC authentication now. if you need it, you can create a new issue for discussion.
   
   link: https://github.com/apache/apisix/issues


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



[GitHub] [apisix-ingress-controller] Bhanuji95 edited a comment on issue #259: request help: Getting route not found issue

Posted by GitBox <gi...@apache.org>.
Bhanuji95 edited a comment on issue #259:
URL: https://github.com/apache/apisix-ingress-controller/issues/259#issuecomment-783411801


   Hello,
   
   Below is the ingress configuration I used.
   
   ## Upstream ##
   ```
   apiVersion: apisix.apache.org/v1
   kind: ApisixUpstream
   metadata:
     name: myapp
   spec:
     ports:
     - port: 80
       loadbalancer:
         type: chash
         hashOn: header
         key: path
   ```
   ---
   ## Route ##
   ```
   apiVersion: apisix.apache.org/v1
   kind: ApisixRoute
   metadata:
     name: myapp
   spec:
     rules:
     - host: localhost
       http:
         paths:
         - backend:
             serviceName: myservice
             servicePort: 80
           path: /path*
   ```
   
   A log from ingress controller says: E0222 22:24:19.709891 1 leaderelection.go:325] error retrieving resource lock default/ingress-apisix-leader: leases.coordination.k8s.io "ingress-apisix-leader" is forbidden: User "system:serviceaccount:default:apisix-view-serviceaccount" cannot get resource "leases" in API group "coordination.k8s.io" in the namespace "default"


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org