Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

getmesh config-validate failing on fresh install #134

Open
Eric-Domeier opened this issue Apr 7, 2023 · 0 comments
Open

getmesh config-validate failing on fresh install #134

Eric-Domeier opened this issue Apr 7, 2023 · 0 comments

Comments

@Eric-Domeier
Copy link

Eric-Domeier commented Apr 7, 2023 •
edited
Loading

Environment:

RKE2 K8S Cluster
NAME STATUS ROLES AGE VERSION
rke2-dev-001 Ready control-plane,etcd,master 22d v1.25.6+rke2r1
rke2-dev-002 Ready control-plane,etcd,master 22d v1.25.6+rke2r1
rke2-dev-003 Ready control-plane,etcd,master 22d v1.25.6+rke2r1
rke2-dev-004 Ready 22d v1.25.6+rke2r1
rke2-dev-005 Ready 22d v1.25.6+rke2r1

Issue

Trying to follow guide https://docs.tetrate.io/getmesh-cli/install/install-istio/, install appears to be successful but getmesh validation fails.

[root@placeholder-rke2-dev-001 maintuser]# getmesh version
getmesh version: 1.1.4
active istioctl: 1.16.1-tetratefips-v0
client version: 1.16.1-tetratefips-v0
control plane version: 1.16.1
data plane version: 1.16.1 (1 proxies)
[root@placeholder-rke2-dev-001 maintuser]# getmesh config-validate
Running the config validator. This may take some time...

2023-04-07T00:02:10Z ERR Error fetching CronJobs per namespace default: the server could not find the requested resource
2023-04-07T00:02:10Z ERR Error fetching CronJobs per namespace default: the server could not find the requested resource
2023-04-07T00:02:11Z ERR Error fetching CronJobs per namespace elastic-system: the server could not find the requested resource
2023-04-07T00:02:11.510652Z     info    klog    Waited for 1.185786199s due to client-side throttling, not priority and fairness, request: GET:https://127.0.0.1:6443/apis/networking.istio.io/v1alpha3/namespaces/placeholder/destinationrules?labelSelector=
2023-04-07T00:02:11Z ERR Error fetching CronJobs per namespace placeholder: the server could not find the requested resource
2023-04-07T00:02:12Z ERR Error fetching CronJobs per namespace istio-system: the server could not find the requested resource
2023-04-07T00:02:12Z ERR Error fetching CronJobs per namespace keycloak: the server could not find the requested resource
2023-04-07T00:02:13Z ERR Error fetching CronJobs per namespace longhorn-system: the server could not find the requested resource
2023-04-07T00:02:14Z ERR Error fetching CronJobs per namespace neuvector: the server could not find the requested resource
2023-04-07T00:02:15Z ERR Error fetching CronJobs per namespace elastic-system: the server could not find the requested resource
2023-04-07T00:02:16Z ERR Error fetching CronJobs per namespace default: the server could not find the requested resource
2023-04-07T00:02:17Z ERR Error fetching CronJobs per namespace elastic-system: the server could not find the requested resource
2023-04-07T00:02:17Z ERR Error fetching CronJobs per namespace placeholder: the server could not find the requested resource
2023-04-07T00:02:18Z ERR Error fetching CronJobs per namespace istio-system: the server could not find the requested resource
2023-04-07T00:02:19Z ERR Error fetching CronJobs per namespace keycloak: the server could not find the requested resource
2023-04-07T00:02:19Z ERR Error fetching CronJobs per namespace longhorn-system: the server could not find the requested resource
2023-04-07T00:02:20Z ERR Error fetching CronJobs per namespace neuvector: the server could not find the requested resource
2023-04-07T00:02:22.107014Z     info    klog    Waited for 1.194946355s due to client-side throttling, not priority and fairness, request: GET:https://127.0.0.1:6443/api/v1/namespaces/placeholder
2023-04-07T00:02:22Z ERR Error fetching CronJobs per namespace placeholder: the server could not find the requested resource
2023-04-07T00:02:22Z ERR Error fetching CronJobs per namespace default: the server could not find the requested resource
2023-04-07T00:02:23Z ERR Error fetching CronJobs per namespace elastic-system: the server could not find the requested resource
2023-04-07T00:02:24Z ERR Error fetching CronJobs per namespace placeholder: the server could not find the requested resource
2023-04-07T00:02:24Z ERR Error fetching CronJobs per namespace istio-system: the server could not find the requested resource
2023-04-07T00:02:25Z ERR Error fetching CronJobs per namespace keycloak: the server could not find the requested resource
2023-04-07T00:02:25Z ERR Error fetching CronJobs per namespace longhorn-system: the server could not find the requested resource
2023-04-07T00:02:26Z ERR Error fetching CronJobs per namespace neuvector: the server could not find the requested resource
2023-04-07T00:02:28Z ERR Error fetching CronJobs per namespace istio-system: the server could not find the requested resource
2023-04-07T00:02:28Z ERR Error fetching CronJobs per namespace default: the server could not find the requested resource
2023-04-07T00:02:29Z ERR Error fetching CronJobs per namespace elastic-system: the server could not find the requested resource
2023-04-07T00:02:30Z ERR Error fetching CronJobs per namespace placeholder: the server could not find the requested resource
2023-04-07T00:02:30Z ERR Error fetching CronJobs per namespace istio-system: the server could not find the requested resource
2023-04-07T00:02:31Z ERR Error fetching CronJobs per namespace keycloak: the server could not find the requested resource
2023-04-07T00:02:32Z ERR Error fetching CronJobs per namespace longhorn-system: the server could not find the requested resource
2023-04-07T00:02:32Z ERR Error fetching CronJobs per namespace neuvector: the server could not find the requested resource
2023-04-07T00:02:34Z ERR Error fetching CronJobs per namespace keycloak: the server could not find the requested resource
2023-04-07T00:02:34.506253Z     info    klog    Waited for 1.195471236s due to client-side throttling, not priority and fairness, request: GET:https://127.0.0.1:6443/api/v1/namespaces
2023-04-07T00:02:35Z ERR Error fetching CronJobs per namespace default: the server could not find the requested resource
2023-04-07T00:02:35Z ERR Error fetching CronJobs per namespace elastic-system: the server could not find the requested resource
2023-04-07T00:02:36Z ERR Error fetching CronJobs per namespace placeholder: the server could not find the requested resource
2023-04-07T00:02:37Z ERR Error fetching CronJobs per namespace istio-system: the server could not find the requested resource
2023-04-07T00:02:37Z ERR Error fetching CronJobs per namespace keycloak: the server could not find the requested resource
2023-04-07T00:02:38Z ERR Error fetching CronJobs per namespace longhorn-system: the server could not find the requested resource
2023-04-07T00:02:38Z ERR Error fetching CronJobs per namespace neuvector: the server could not find the requested resource
2023-04-07T00:02:40Z ERR Error fetching CronJobs per namespace longhorn-system: the server could not find the requested resource
2023-04-07T00:02:41Z ERR Error fetching CronJobs per namespace default: the server could not find the requested resource
2023-04-07T00:02:42Z ERR Error fetching CronJobs per namespace elastic-system: the server could not find the requested resource
2023-04-07T00:02:42Z ERR Error fetching CronJobs per namespace placeholder: the server could not find the requested resource
2023-04-07T00:02:43Z ERR Error fetching CronJobs per namespace istio-system: the server could not find the requested resource
2023-04-07T00:02:43Z ERR Error fetching CronJobs per namespace keycloak: the server could not find the requested resource
2023-04-07T00:02:44Z ERR Error fetching CronJobs per namespace longhorn-system: the server could not find the requested resource
2023-04-07T00:02:45Z ERR Error fetching CronJobs per namespace neuvector: the server could not find the requested resource
2023-04-07T00:02:46.906630Z     info    klog    Waited for 1.195688531s due to client-side throttling, not priority and fairness, request: GET:https://127.0.0.1:6443/api/v1/namespaces
2023-04-07T00:02:47Z ERR Error fetching CronJobs per namespace neuvector: the server could not find the requested resource
2023-04-07T00:02:47Z ERR Error fetching CronJobs per namespace default: the server could not find the requested resource
2023-04-07T00:02:48Z ERR Error fetching CronJobs per namespace elastic-system: the server could not find the requested resource
2023-04-07T00:02:48Z ERR Error fetching CronJobs per namespace placeholder: the server could not find the requested resource
2023-04-07T00:02:49Z ERR Error fetching CronJobs per namespace istio-system: the server could not find the requested resource
2023-04-07T00:02:50Z ERR Error fetching CronJobs per namespace keycloak: the server could not find the requested resource
2023-04-07T00:02:50Z ERR Error fetching CronJobs per namespace longhorn-system: the server could not find the requested resource
2023-04-07T00:02:51Z ERR Error fetching CronJobs per namespace neuvector: the server could not find the requested resource
error kiali validation:
the server could not find the requested resource
the server could not find the requested resource
the server could not find the requested resource
the server could not find the requested resource
the server could not find the requested resource
the server could not find the requested resource
the server could not find the requested resource

Steps to reproduce:

kubectl create namespace istio-system

Make it privileged

kubectl label namespace istio-system "pod-security.kubernetes.io/enforce=privileged"

[root@placeholder-rke2-dev-001 maintuser]# getmesh istioctl install --set profile=default --set hub=10.128.8.119/ironbank/tetrate --set tag=1.16.1-tetratefips-v1
[WARNING] your current patch version 1.16.1 is not the latest version 1.16.3. We recommend you fetch the latest version through "getmesh fetch" command, and switch to the latest version through "getmesh switch" command
? Proceed? [y/N] y█
✔ No issues found when checking the cluster. Istio is safe to install or upgrade!
  To get started, check out https://istio.io/latest/docs/setup/getting-started/

This will install the Istio 1.16.1 default profile with ["Istio core" "Istiod" "Ingress gateways"] components into the cluster. Proceed? (y/N) y
✔ Istio core installed
✔ Istiod installed
✔ Ingress gateways installed
✔ Installation complete
Making this installation the default for injection and validation.

Thank you for installing Istio 1.16.  Please take a few minutes to tell us about your install/upgrade experience!  https://forms.gle/99uiMML96AmsXY5d6
1 Istio control planes detected, checking --revision "default" only
✔ ClusterRole: istiod-istio-system.istio-system checked successfully
✔ ClusterRole: istio-reader-istio-system.istio-system checked successfully
✔ ClusterRoleBinding: istio-reader-istio-system.istio-system checked successfully
✔ ClusterRoleBinding: istiod-istio-system.istio-system checked successfully
✔ ServiceAccount: istio-reader-service-account.istio-system checked successfully
✔ Role: istiod-istio-system.istio-system checked successfully
✔ RoleBinding: istiod-istio-system.istio-system checked successfully
✔ ServiceAccount: istiod-service-account.istio-system checked successfully
✔ CustomResourceDefinition: wasmplugins.extensions.istio.io.istio-system checked successfully
✔ CustomResourceDefinition: destinationrules.networking.istio.io.istio-system checked successfully
✔ CustomResourceDefinition: envoyfilters.networking.istio.io.istio-system checked successfully
✔ CustomResourceDefinition: gateways.networking.istio.io.istio-system checked successfully
✔ CustomResourceDefinition: proxyconfigs.networking.istio.io.istio-system checked successfully
✔ CustomResourceDefinition: serviceentries.networking.istio.io.istio-system checked successfully
✔ CustomResourceDefinition: sidecars.networking.istio.io.istio-system checked successfully
✔ CustomResourceDefinition: virtualservices.networking.istio.io.istio-system checked successfully
✔ CustomResourceDefinition: workloadentries.networking.istio.io.istio-system checked successfully
✔ CustomResourceDefinition: workloadgroups.networking.istio.io.istio-system checked successfully
✔ CustomResourceDefinition: authorizationpolicies.security.istio.io.istio-system checked successfully
✔ CustomResourceDefinition: peerauthentications.security.istio.io.istio-system checked successfully
✔ CustomResourceDefinition: requestauthentications.security.istio.io.istio-system checked successfully
✔ CustomResourceDefinition: telemetries.telemetry.istio.io.istio-system checked successfully
✔ CustomResourceDefinition: istiooperators.install.istio.io.istio-system checked successfully
✔ HorizontalPodAutoscaler: istiod.istio-system checked successfully
✔ ClusterRole: istiod-clusterrole-istio-system.istio-system checked successfully
✔ ClusterRole: istiod-gateway-controller-istio-system.istio-system checked successfully
✔ ClusterRoleBinding: istiod-clusterrole-istio-system.istio-system checked successfully
✔ ClusterRoleBinding: istiod-gateway-controller-istio-system.istio-system checked successfully
✔ ConfigMap: istio.istio-system checked successfully
✔ Deployment: istiod.istio-system checked successfully
✔ ConfigMap: istio-sidecar-injector.istio-system checked successfully
✔ MutatingWebhookConfiguration: istio-sidecar-injector.istio-system checked successfully
✔ PodDisruptionBudget: istiod.istio-system checked successfully
✔ ClusterRole: istio-reader-clusterrole-istio-system.istio-system checked successfully
✔ ClusterRoleBinding: istio-reader-clusterrole-istio-system.istio-system checked successfully
✔ Role: istiod.istio-system checked successfully
✔ RoleBinding: istiod.istio-system checked successfully
✔ Service: istiod.istio-system checked successfully
✔ ServiceAccount: istiod.istio-system checked successfully
✔ EnvoyFilter: stats-filter-1.13.istio-system checked successfully
✔ EnvoyFilter: tcp-stats-filter-1.13.istio-system checked successfully
✔ EnvoyFilter: stats-filter-1.14.istio-system checked successfully
✔ EnvoyFilter: tcp-stats-filter-1.14.istio-system checked successfully
✔ EnvoyFilter: stats-filter-1.15.istio-system checked successfully
✔ EnvoyFilter: tcp-stats-filter-1.15.istio-system checked successfully
✔ EnvoyFilter: stats-filter-1.16.istio-system checked successfully
✔ EnvoyFilter: tcp-stats-filter-1.16.istio-system checked successfully
✔ ValidatingWebhookConfiguration: istio-validator-istio-system.istio-system checked successfully
✔ HorizontalPodAutoscaler: istio-ingressgateway.istio-system checked successfully
✔ Deployment: istio-ingressgateway.istio-system checked successfully
✔ PodDisruptionBudget: istio-ingressgateway.istio-system checked successfully
✔ Role: istio-ingressgateway-sds.istio-system checked successfully
✔ RoleBinding: istio-ingressgateway-sds.istio-system checked successfully
✔ Service: istio-ingressgateway.istio-system checked successfully
✔ ServiceAccount: istio-ingressgateway-service-account.istio-system checked successfully
Checked 15 custom resource definitions
Checked 2 Istio Deployments
✔ Istio is installed and verified successfully

Thanks.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@Eric-Domeier