You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@cloudstack.apache.org by GitBox <gi...@apache.org> on 2022/12/13 07:16:11 UTC

[GitHub] [cloudstack] aron-ac commented on issue #6344: User kubeadmin is not getting created except for default project in k8s cluster

aron-ac commented on issue #6344:
URL: https://github.com/apache/cloudstack/issues/6344#issuecomment-1347846696

   @nvazquez i'm not sure if this is fully resolved. if a cluster belongs to a project, i do see kubeadmin however from the cluster itself kubeadmin isn't being called correctly.
   
   i tested this by creating a k8s cluster as an admin account and from inside the k8s cluster creating an nginx ingress controller. there was no issue:
   
   ```% kubectl --namespace default get services -o wide -w nginx-ingress-ingress-nginx-controller
   NAME                                     TYPE           CLUSTER-IP       EXTERNAL-IP   PORT(S)                      AGE   SELECTOR
   nginx-ingress-ingress-nginx-controller   LoadBalancer   10.100.126.176   45.38.46.88   80:32279/TCP,443:30353/TCP   25s   app.kubernetes.io/component=controller,app.kubernetes.io/instance=nginx-ingress,app.kubernetes.io/name=ingress-nginx```
   
   then i created a project and created a domain admin user for that project and deployed another k8s cluster and attempted to deploy an nginx ingress controller and a traefik ingress but the external IP stayed in a pending state:
   
   ```% kubectl --namespace default get services -o wide -w nginx-ingress-ingress-nginx-controller
   NAME                                     TYPE           CLUSTER-IP      EXTERNAL-IP   PORT(S)                      AGE     SELECTOR
   nginx-ingress-ingress-nginx-controller   LoadBalancer   10.98.170.156   <pending>     80:32737/TCP,443:32628/TCP   5m36s   app.kubernetes.io/component=controller,app.kubernetes.io/instance=nginx-ingress,app.kubernetes.io/name=ingress-nginx```
   
   looking in the cloudstack events i noticed that with the normal account that kubeadmin successfully acquired the new pub ip for a load balancer in cloudstack (nginx ingress in k8s).  but in the project account domain admin, kubeadmin was never recognized.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@cloudstack.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org