-
Bug
-
Resolution: Done
-
Critical
-
maistra-0.12.0
-
None
Maistra 0.12 Multitenant installation not working
- Issue Describption *
When we test an multitenant enabled installation on OCP4 AWS, we see the following errors:
istio-operator log during installation:
{"level":"error","ts":1562352011.5580666,"logger":"controller_servicemeshcontrolplane","caller":"controlplane/manifestprocessing.go:213","msg":"unexpected error occurred during creation of new resource","Component":"istio/charts/mixer","manifest":"istio/charts/mixer/templates/config.yaml","Resource":"istio-system/tcpconnectionsopened=config.istio.io/v1alpha2,Kind=metric","error":"Timeout: request did not complete within requested timeout 30s"
istio-operator log after all pods are running in istio-system:
istio-operator log installation result:
Error: 'Installed=False, reason=InstallError, message=[Timeout: request did not complete within requested timeout 30s
Deploy bookinfo, each pod of bookinfo app only has 1/1 Ready. Sidecar was not able to be injected.
When I tried to apply a memberroll, I am getting an error:
Error from server: admission webhook "smmr.validation.maistra.io" denied the request: user 'kube:admin' does not have permission to access project/namespace 'bookinfo'
- Log *
istio-operator log: http://pastebin.test.redhat.com/777748
- Build and Environment *
Build: istio maistra-latest-qe
Environment: OCP 4.1 AWS
- How to produce *
Create an AWS OCP4.1 cluster
Deploy registry-puller: https://github.com/knrc/registry-puller
Follow https://github.com/Maistra/istio-operator#installation
- install Jaeger operator
- Install Kiali Operator
- Install istio Operator: operator.yaml: http://pastebin.test.redhat.com/777704
- Wait 20 seconds until smcp webhook is ready
- Install a CR with istio MT enabled: cr.yaml : http://pastebin.test.redhat.com/777750
wait until all the pods are running in istio-system
$ oc get pod -n istio-system
NAME READY STATUS RESTARTS AGE
istio-citadel-8489b8bb96-tx459 1/1 Running 0 62m
istio-egressgateway-5ccd4d5ddd-sj2ql 1/1 Running 0 51m
istio-galley-58ff8db57c-bl27n 1/1 Running 0 61m
istio-ingressgateway-698674848f-m2l94 1/1 Running 0 51m
istio-pilot-764966cf69-khdcq 2/2 Running 0 52m
istio-policy-7c856f7d5f-jlccf 2/2 Running 0 61m
istio-sidecar-injector-757b8ccdbf-x74ld 1/1 Running 0 51m
istio-telemetry-65d8b47c98-fvwv7 2/2 Running 0 61m
jaeger-6dd8db85cc-qtdph 2/2 Running 0 61m
kiali-8b4697bfc-djrwq 1/1 Running 0 50m
prometheus-fc97cb488-tl5gt 2/2 Running 0 62m
Deploy bookinfo in bookinfo namespace: script: https://github.com/yxun/moitt/blob/master/test/maistra/bookinfo_install.sh
- is related to
-
MAISTRA-583 Admission webhook "smmr.validation.maistra.io" denied the request: user 'kube:admin' does not have permission to access project/namespace
-
- Closed
-
- relates to
-
MAISTRA-585 TP12: Kiali: Application is not available
-
- Closed
-