Uploaded image for project: 'Red Hat Fuse'
  1. Red Hat Fuse
  2. ENTESB-12202

[SB2] Booster circuit breaker fails with no RBAC policy matched at runtime

    XMLWordPrintable

Details

    • Bug
    • Resolution: Done
    • Blocker
    • None
    • fuse-7.5-CR2
    • Examples, Fuse on Openshift
    • None
    • Fuse 7.5 Sprint 54 - Interim

    Description

      Using https://github.com/jboss-fuse/fuse-springboot-circuit-breaker-booster/tree/redhat-sb2

      with BOM: 7.5.0.fuse-sb2-750029-redhat-00002

      will lead to exception

      Starting the Java application using /opt/run-java/run-java.sh ...
      exec java -javaagent:/opt/jolokia/jolokia.jar=config=/opt/jolokia/etc/jolokia.properties -javaagent:/opt/prometheus/jmx_prometheus_javaagent.jar=9779:/opt/prometheus/prometheus-config.yml -XX:+UseParallelGC -XX:GCTimeRatio=4 -XX:AdaptiveSizePolicyWeight=90 -XX:MinHeapFreeRatio=20 -XX:MaxHeapFreeRatio=40 -XX:+ExitOnOutOfMemoryError -cp .:/deployments/* com.redhat.fuse.boosters.cb.Application
      OpenJDK 64-Bit Server VM warning: If the number of processors is expected to increase from one, then you should configure the number of parallel GC threads appropriately using -XX:ParallelGCThreads=N
      I> No access restrictor found, access to any MBean is allowed
      Jolokia: Agent started with URL https://10.130.1.153:8778/jolokia/
      2019-11-06 12:35:21.473  WARN 1 --- [           main] o.s.cloud.kubernetes.StandardPodUtils    : Failed to get pod with name:[name-service-1-4cmxb]. You should look into this if things aren't working as you expect. Are you missing serviceaccount permissions?
      
      io.fabric8.kubernetes.client.KubernetesClientException: Failure executing: GET at: https://172.30.0.1/api/v1/namespaces/llowinge/pods/name-service-1-4cmxb. Message: Forbidden!Configured service account doesn't have access. Service account may have been revoked. pods "name-service-1-4cmxb" is forbidden: User "system:serviceaccount:llowinge:default" cannot get pods in the namespace "llowinge": no RBAC policy matched.
      	at io.fabric8.kubernetes.client.dsl.base.OperationSupport.requestFailure(OperationSupport.java:476) ~[kubernetes-client-4.1.0.jar:na]
      	at io.fabric8.kubernetes.client.dsl.base.OperationSupport.assertResponseCode(OperationSupport.java:413) ~[kubernetes-client-4.1.0.jar:na]
      	at io.fabric8.kubernetes.client.dsl.base.OperationSupport.handleResponse(OperationSupport.java:381) ~[kubernetes-client-4.1.0.jar:na]
      	at io.fabric8.kubernetes.client.dsl.base.OperationSupport.handleResponse(OperationSupport.java:344) ~[kubernetes-client-4.1.0.jar:na]
      	at io.fabric8.kubernetes.client.dsl.base.OperationSupport.handleGet(OperationSupport.java:313) ~[kubernetes-client-4.1.0.jar:na]
      	at io.fabric8.kubernetes.client.dsl.base.OperationSupport.handleGet(OperationSupport.java:296) ~[kubernetes-client-4.1.0.jar:na]
      	at io.fabric8.kubernetes.client.dsl.base.BaseOperation.handleGet(BaseOperation.java:794) ~[kubernetes-client-4.1.0.jar:na]
      	at io.fabric8.kubernetes.client.dsl.base.BaseOperation.getMandatory(BaseOperation.java:210) ~[kubernetes-client-4.1.0.jar:na]
      	at io.fabric8.kubernetes.client.dsl.base.BaseOperation.get(BaseOperation.java:177) ~[kubernetes-client-4.1.0.jar:na]
      	at org.springframework.cloud.kubernetes.StandardPodUtils.internalGetPod(StandardPodUtils.java:72) [spring-cloud-kubernetes-core-1.0.1.RELEASE.jar:1.0.1.RELEASE]
      	at org.springframework.cloud.kubernetes.StandardPodUtils.lambda$new$0(StandardPodUtils.java:56) [spring-cloud-kubernetes-core-1.0.1.RELEASE.jar:1.0.1.RELEASE]
      	at org.springframework.cloud.kubernetes.LazilyInstantiate.swapper(LazilyInstantiate.java:47) ~[spring-cloud-kubernetes-core-1.0.1.RELEASE.jar:1.0.1.RELEASE]
      	at org.springframework.cloud.kubernetes.LazilyInstantiate.lambda$new$0(LazilyInstantiate.java:35) ~[spring-cloud-kubernetes-core-1.0.1.RELEASE.jar:1.0.1.RELEASE]
      	at org.springframework.cloud.kubernetes.LazilyInstantiate.get(LazilyInstantiate.java:43) ~[spring-cloud-kubernetes-core-1.0.1.RELEASE.jar:1.0.1.RELEASE]
      	at org.springframework.cloud.kubernetes.StandardPodUtils.isInsideKubernetes(StandardPodUtils.java:66) [spring-cloud-kubernetes-core-1.0.1.RELEASE.jar:1.0.1.RELEASE]
      	at org.springframework.cloud.kubernetes.profile.KubernetesProfileApplicationListener.addKubernetesProfile(KubernetesProfileApplicationListener.java:59) ~[spring-cloud-kubernetes-core-1.0.1.RELEASE.jar:1.0.1.RELEASE]
      	at org.springframework.cloud.kubernetes.profile.KubernetesApplicationContextInitializer.initialize(KubernetesApplicationContextInitializer.java:62) ~[spring-cloud-kubernetes-core-1.0.1.RELEASE.jar:1.0.1.RELEASE]
      	at org.springframework.boot.SpringApplication.applyInitializers(SpringApplication.java:621) ~[spring-boot-2.1.6.RELEASE.jar:2.1.6.RELEASE]
      	at org.springframework.boot.SpringApplication.prepareContext(SpringApplication.java:365) ~[spring-boot-2.1.6.RELEASE.jar:2.1.6.RELEASE]
      	at org.springframework.boot.SpringApplication.run(SpringApplication.java:310) ~[spring-boot-2.1.6.RELEASE.jar:2.1.6.RELEASE]
      	at org.springframework.boot.builder.SpringApplicationBuilder.run(SpringApplicationBuilder.java:139) ~[spring-boot-2.1.6.RELEASE.jar:2.1.6.RELEASE]
      	at org.springframework.cloud.bootstrap.BootstrapApplicationListener.bootstrapServiceContext(BootstrapApplicationListener.java:203) ~[spring-cloud-context-2.1.1.RELEASE.jar:2.1.1.RELEASE]
      	at org.springframework.cloud.bootstrap.BootstrapApplicationListener.onApplicationEvent(BootstrapApplicationListener.java:114) ~[spring-cloud-context-2.1.1.RELEASE.jar:2.1.1.RELEASE]
      	at org.springframework.cloud.bootstrap.BootstrapApplicationListener.onApplicationEvent(BootstrapApplicationListener.java:71) ~[spring-cloud-context-2.1.1.RELEASE.jar:2.1.1.RELEASE]
      	at org.springframework.context.event.SimpleApplicationEventMulticaster.doInvokeListener(SimpleApplicationEventMulticaster.java:172) ~[spring-context-5.1.8.RELEASE.jar:5.1.8.RELEASE]
      	at org.springframework.context.event.SimpleApplicationEventMulticaster.invokeListener(SimpleApplicationEventMulticaster.java:165) ~[spring-context-5.1.8.RELEASE.jar:5.1.8.RELEASE]
      	at org.springframework.context.event.SimpleApplicationEventMulticaster.multicastEvent(SimpleApplicationEventMulticaster.java:139) ~[spring-context-5.1.8.RELEASE.jar:5.1.8.RELEASE]
      	at org.springframework.context.event.SimpleApplicationEventMulticaster.multicastEvent(SimpleApplicationEventMulticaster.java:127) ~[spring-context-5.1.8.RELEASE.jar:5.1.8.RELEASE]
      	at org.springframework.boot.context.event.EventPublishingRunListener.environmentPrepared(EventPublishingRunListener.java:75) ~[spring-boot-2.1.6.RELEASE.jar:2.1.6.RELEASE]
      	at org.springframework.boot.SpringApplicationRunListeners.environmentPrepared(SpringApplicationRunListeners.java:53) ~[spring-boot-2.1.6.RELEASE.jar:2.1.6.RELEASE]
      	at org.springframework.boot.SpringApplication.prepareEnvironment(SpringApplication.java:340) ~[spring-boot-2.1.6.RELEASE.jar:2.1.6.RELEASE]
      	at org.springframework.boot.SpringApplication.run(SpringApplication.java:304) ~[spring-boot-2.1.6.RELEASE.jar:2.1.6.RELEASE]
      	at org.springframework.boot.SpringApplication.run(SpringApplication.java:1213) ~[spring-boot-2.1.6.RELEASE.jar:2.1.6.RELEASE]
      	at org.springframework.boot.SpringApplication.run(SpringApplication.java:1202) ~[spring-boot-2.1.6.RELEASE.jar:2.1.6.RELEASE]
      	at com.redhat.fuse.boosters.cb.Application.main(Application.java:13) ~[name-service-7.0.0.jar:na]
      
      2019-11-06 12:35:21.936  INFO 1 --- [           main] trationDelegate$BeanPostProcessorChecker : Bean 'org.springframework.cloud.autoconfigure.ConfigurationPropertiesRebinderAutoConfiguration' of type [org.springframework.cloud.autoconfigure.ConfigurationPropertiesRebinderAutoConfiguration$$EnhancerBySpringCGLIB$$5640037] is not eligible for getting processed by all BeanPostProcessors (for example: not eligible for auto-proxying)
      
        .   ____          _            __ _ _
       /\\ / ___'_ __ _ _(_)_ __  __ _ \ \ \ \
      ( ( )\___ | '_ | '_| | '_ \/ _` | \ \ \ \
       \\/  ___)| |_)| | | | | || (_| |  ) ) ) )
        '  |____| .__|_| |_|_| |_\__, | / / / /
       =========|_|==============|___/=/_/_/_/
       :: Spring Boot ::        (v2.1.6.RELEASE)
      
      2019-11-06 12:35:22.181  WARN 1 --- [           main] o.s.c.k.config.ConfigMapPropertySource   : Can't read configMap with name: [application] in namespace:[llowinge]. Ignoring
      2019-11-06 12:35:22.184  INFO 1 --- [           main] b.c.PropertySourceBootstrapConfiguration : Located property source: CompositePropertySource {name='composite-configmap', propertySources=[ConfigMapPropertySource {name='configmap.application.llowinge'}]}
      2019-11-06 12:35:22.186  INFO 1 --- [           main] b.c.PropertySourceBootstrapConfiguration : Located property source: SecretsPropertySource {name='secrets.application.llowinge'}
      2019-11-06 12:35:22.254  WARN 1 --- [           main] o.s.cloud.kubernetes.StandardPodUtils    : Failed to get pod with name:[name-service-1-4cmxb]. You should look into this if things aren't working as you expect. Are you missing serviceaccount permissions?
      
      io.fabric8.kubernetes.client.KubernetesClientException: Failure executing: GET at: https://172.30.0.1/api/v1/namespaces/llowinge/pods/name-service-1-4cmxb. Message: Forbidden!Configured service account doesn't have access. Service account may have been revoked. pods "name-service-1-4cmxb" is forbidden: User "system:serviceaccount:llowinge:default" cannot get pods in the namespace "llowinge": no RBAC policy matched.
      	at io.fabric8.kubernetes.client.dsl.base.OperationSupport.requestFailure(OperationSupport.java:476) ~[kubernetes-client-4.1.0.jar:na]
      	at io.fabric8.kubernetes.client.dsl.base.OperationSupport.assertResponseCode(OperationSupport.java:413) ~[kubernetes-client-4.1.0.jar:na]
      	at io.fabric8.kubernetes.client.dsl.base.OperationSupport.handleResponse(OperationSupport.java:381) ~[kubernetes-client-4.1.0.jar:na]
      	at io.fabric8.kubernetes.client.dsl.base.OperationSupport.handleResponse(OperationSupport.java:344) ~[kubernetes-client-4.1.0.jar:na]
      	at io.fabric8.kubernetes.client.dsl.base.OperationSupport.handleGet(OperationSupport.java:313) ~[kubernetes-client-4.1.0.jar:na]
      	at io.fabric8.kubernetes.client.dsl.base.OperationSupport.handleGet(OperationSupport.java:296) ~[kubernetes-client-4.1.0.jar:na]
      	at io.fabric8.kubernetes.client.dsl.base.BaseOperation.handleGet(BaseOperation.java:794) ~[kubernetes-client-4.1.0.jar:na]
      	at io.fabric8.kubernetes.client.dsl.base.BaseOperation.getMandatory(BaseOperation.java:210) ~[kubernetes-client-4.1.0.jar:na]
      	at io.fabric8.kubernetes.client.dsl.base.BaseOperation.get(BaseOperation.java:177) ~[kubernetes-client-4.1.0.jar:na]
      	at org.springframework.cloud.kubernetes.StandardPodUtils.internalGetPod(StandardPodUtils.java:72) [spring-cloud-kubernetes-core-1.0.1.RELEASE.jar:1.0.1.RELEASE]
      	at org.springframework.cloud.kubernetes.StandardPodUtils.lambda$new$0(StandardPodUtils.java:56) [spring-cloud-kubernetes-core-1.0.1.RELEASE.jar:1.0.1.RELEASE]
      	at org.springframework.cloud.kubernetes.LazilyInstantiate.swapper(LazilyInstantiate.java:47) ~[spring-cloud-kubernetes-core-1.0.1.RELEASE.jar:1.0.1.RELEASE]
      	at org.springframework.cloud.kubernetes.LazilyInstantiate.lambda$new$0(LazilyInstantiate.java:35) ~[spring-cloud-kubernetes-core-1.0.1.RELEASE.jar:1.0.1.RELEASE]
      	at org.springframework.cloud.kubernetes.LazilyInstantiate.get(LazilyInstantiate.java:43) ~[spring-cloud-kubernetes-core-1.0.1.RELEASE.jar:1.0.1.RELEASE]
      	at org.springframework.cloud.kubernetes.StandardPodUtils.isInsideKubernetes(StandardPodUtils.java:66) [spring-cloud-kubernetes-core-1.0.1.RELEASE.jar:1.0.1.RELEASE]
      	at org.springframework.cloud.kubernetes.profile.KubernetesProfileApplicationListener.addKubernetesProfile(KubernetesProfileApplicationListener.java:59) ~[spring-cloud-kubernetes-core-1.0.1.RELEASE.jar:1.0.1.RELEASE]
      	at org.springframework.cloud.kubernetes.profile.KubernetesApplicationContextInitializer.initialize(KubernetesApplicationContextInitializer.java:62) ~[spring-cloud-kubernetes-core-1.0.1.RELEASE.jar:1.0.1.RELEASE]
      	at org.springframework.boot.SpringApplication.applyInitializers(SpringApplication.java:621) ~[spring-boot-2.1.6.RELEASE.jar:2.1.6.RELEASE]
      	at org.springframework.boot.SpringApplication.prepareContext(SpringApplication.java:365) ~[spring-boot-2.1.6.RELEASE.jar:2.1.6.RELEASE]
      	at org.springframework.boot.SpringApplication.run(SpringApplication.java:310) ~[spring-boot-2.1.6.RELEASE.jar:2.1.6.RELEASE]
      	at org.springframework.boot.SpringApplication.run(SpringApplication.java:1213) ~[spring-boot-2.1.6.RELEASE.jar:2.1.6.RELEASE]
      	at org.springframework.boot.SpringApplication.run(SpringApplication.java:1202) ~[spring-boot-2.1.6.RELEASE.jar:2.1.6.RELEASE]
      	at com.redhat.fuse.boosters.cb.Application.main(Application.java:13) ~[name-service-7.0.0.jar:na]
      
      2019-11-06 12:35:22.256  INFO 1 --- [           main] com.redhat.fuse.boosters.cb.Application  : No active profile set, falling back to default profiles: default
      2019-11-06 12:35:23.531  WARN 1 --- [           main] o.s.boot.actuate.endpoint.EndpointId     : Endpoint ID 'service-registry' contains invalid characters, please migrate to a valid format.
      2019-11-06 12:35:23.792  INFO 1 --- [           main] o.s.cloud.context.scope.GenericScope     : BeanFactory id=460d10f4-4622-3bf6-8852-8200cc722b0a
      2019-11-06 12:35:23.834  INFO 1 --- [           main] trationDelegate$BeanPostProcessorChecker : Bean 'org.apache.camel.spring.boot.CamelAutoConfiguration' of type [org.apache.camel.spring.boot.CamelAutoConfiguration$$EnhancerBySpringCGLIB$$b73c359] is not eligible for getting processed by all BeanPostProcessors (for example: not eligible for auto-proxying)
      2019-11-06 12:35:23.863  INFO 1 --- [           main] trationDelegate$BeanPostProcessorChecker : Bean 'org.springframework.cloud.autoconfigure.ConfigurationPropertiesRebinderAutoConfiguration' of type [org.springframework.cloud.autoconfigure.ConfigurationPropertiesRebinderAutoConfiguration$$EnhancerBySpringCGLIB$$5640037] is not eligible for getting processed by all BeanPostProcessors (for example: not eligible for auto-proxying)
      2019-11-06 12:35:24.241  WARN 1 --- [           main] io.undertow.websockets.jsr               : UT026010: Buffer pool was not set on WebSocketDeploymentInfo, the default pool will be used
      2019-11-06 12:35:24.284  INFO 1 --- [           main] io.undertow.servlet                      : Initializing Spring embedded WebApplicationContext
      2019-11-06 12:35:24.284  INFO 1 --- [           main] o.s.web.context.ContextLoader            : Root WebApplicationContext: initialization completed in 2017 ms
      2019-11-06 12:35:24.746  INFO 1 --- [           main] o.a.c.i.converter.DefaultTypeConverter   : Type converters loaded (core: 195, classpath: 7)
      2019-11-06 12:35:25.355  INFO 1 --- [           main] o.s.s.concurrent.ThreadPoolTaskExecutor  : Initializing ExecutorService 'applicationTaskExecutor'
      2019-11-06 12:35:26.328  INFO 1 --- [           main] o.s.b.a.e.web.EndpointLinksResolver      : Exposing 2 endpoint(s) beneath base path ''
      2019-11-06 12:35:26.597  INFO 1 --- [           main] o.a.camel.spring.boot.RoutesCollector    : Loading additional Camel XML routes from: classpath:camel/*.xml
      2019-11-06 12:35:26.597  INFO 1 --- [           main] o.a.camel.spring.boot.RoutesCollector    : Loading additional Camel XML rests from: classpath:camel-rest/*.xml
      2019-11-06 12:35:26.598  INFO 1 --- [           main] o.a.camel.spring.SpringCamelContext      : Apache Camel 2.23.2.fuse-750029-redhat-00001 (CamelContext: camel-1) is starting
      2019-11-06 12:35:26.599  INFO 1 --- [           main] o.a.c.m.ManagedManagementStrategy        : JMX is enabled
      2019-11-06 12:35:26.765  INFO 1 --- [           main] o.a.camel.spring.SpringCamelContext      : StreamCaching is not in use. If using streams then its recommended to enable stream caching. See more details at http://camel.apache.org/stream-caching.html
      2019-11-06 12:35:26.838  INFO 1 --- [           main] o.a.c.c.jackson.JacksonDataFormat        : Found single ObjectMapper in Registry to use: com.fasterxml.jackson.databind.ObjectMapper@370a8b6e
      2019-11-06 12:35:26.839  INFO 1 --- [           main] o.a.c.c.jackson.JacksonDataFormat        : Found single ObjectMapper in Registry to use: com.fasterxml.jackson.databind.ObjectMapper@370a8b6e
      2019-11-06 12:35:26.841  INFO 1 --- [           main] o.a.camel.spring.SpringCamelContext      : Route: route1 started and consuming from: servlet:/name?httpMethodRestrict=GET
      2019-11-06 12:35:26.841  INFO 1 --- [           main] o.a.camel.spring.SpringCamelContext      : Total 1 routes, of which 1 are started
      2019-11-06 12:35:26.842  INFO 1 --- [           main] o.a.camel.spring.SpringCamelContext      : Apache Camel 2.23.2.fuse-750029-redhat-00001 (CamelContext: camel-1) started in 0.243 seconds
      2019-11-06 12:35:26.854  INFO 1 --- [           main] o.a.c.c.s.CamelHttpTransportServlet      : Initialized CamelHttpTransportServlet[name=CamelServlet, contextPath=]
      2019-11-06 12:35:26.878  INFO 1 --- [           main] org.xnio                                 : XNIO version 3.3.8.Final
      2019-11-06 12:35:26.892  INFO 1 --- [           main] org.xnio.nio                             : XNIO NIO Implementation Version 3.3.8.Final
      2019-11-06 12:35:26.972  INFO 1 --- [           main] o.s.b.w.e.u.UndertowServletWebServer     : Undertow started on port(s) 8080 (http) with context path ''
      2019-11-06 12:35:26.974  INFO 1 --- [           main] com.redhat.fuse.boosters.cb.Application  : Started Application in 7.114 seconds (JVM running for 9.482)
      2019-11-06 12:35:36.881  INFO 1 --- [  XNIO-1 task-1] io.undertow.servlet                      : Initializing Spring DispatcherServlet 'dispatcherServlet'
      2019-11-06 12:35:36.881  INFO 1 --- [  XNIO-1 task-1] o.s.web.servlet.DispatcherServlet        : Initializing Servlet 'dispatcherServlet'
      2019-11-06 12:35:36.895  INFO 1 --- [  XNIO-1 task-1] o.s.web.servlet.DispatcherServlet        : Completed initialization in 14 ms
      

      Attachments

        Activity

          People

            atarocch@redhat.com Andrea Tarocchi (Inactive)
            llowinge@redhat.com Lukas Lowinger
            Lukas Lowinger Lukas Lowinger
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: