Airship/Promenade Issues when deploying Treasure map behind a proxy
Dear Airship Team,
This is our first time deploying Airship/Treasuremap behind a proxy server The first host "genesis" host comes up. The next step is to deploy the rest of the cluster. The deploy is multi step.
Step One. Shipyard/Deckhand creates the configdocs to be used for each node.
Step Two. Shipyard/Promenade/Deckhand commits the configdocs and validates them. This step is failing with a 401 error but it is not an authorization problem. We can successfully logon with username/password
We login into each component container. The armada, deckhand, shipyard containers do not try to go through the proxy server, however, the promenade containers do try to go through the proxy server and fail regardless of all the recommended changes we have tested
This is the error we are getting. Again, we can logon as shipyard user and perform commands. The credentials and images referenced are correct.
+ commit_configdocs ++ pwd + sudo docker run -v /root/akraino:/target -e OS_AUTH_URL=http://keystone-api.ucp.svc.cluster.local:80/v3 -e OS_PASSWORD=86db58e20de93ef55477 -e OS_PROJECT_DOMAIN_NAME=default -e OS_PROJECT_NAME=service -e OS_USERNAME=shipyard -e OS_USER_DOMAIN_NAME=default -e OS_IDENTITY_API_VERSION=3 --rm --net=host quay.io/airshipit/shipyard:165c845e3e7459d2a4892ed4ca910b00675e7561 commit configdocs Error: Validations failed Reason: Validation - Error: None Message: Promenade unable to validate configdocs or an invalid response has been returned Diagnostic: HTTPError: 401 Client Error: Unauthorized for url: http://promenade-api.ucp.svc.cluster.local:80/api/v1.0/validatedesign
Best Regards,
Deepak Kataria
Deepak, This commit of the configdocs should not go trough the proxy. Please, verify from inside the container that it goes directly to the promenade-api.ucp.svc.cluster.local:80 (this address is local to the cluster).
-- Roman Gorshunov On Fri, Nov 30, 2018 at 7:04 PM KATARIA, DEEPAK dd7022@att.com wrote:
Dear Airship Team,
This is our first time deploying Airship/Treasuremap behind a proxy server The first host “genesis” host comes up. The next step is to deploy the rest of the cluster. The deploy is multi step.
Step One. Shipyard/Deckhand creates the configdocs to be used for each node.
Step Two. Shipyard/Promenade/Deckhand commits the configdocs and validates them. This step is failing with a 401 error but it is not an authorization problem.
We can successfully logon with username/password
We login into each component container. The armada, deckhand, shipyard containers do not try to go through the proxy server, however, the promenade containers
do try to go through the proxy server and fail regardless of all the recommended changes we have tested
This is the error we are getting. Again, we can logon as shipyard user and perform commands. The credentials and images referenced are correct.
- commit_configdocs
++ pwd
- sudo docker run -v /root/akraino:/target -e OS_AUTH_URL=http://keystone-api.ucp.svc.cluster.local:80/v3 -e OS_PASSWORD=86db58e20de93ef55477 -e OS_PROJECT_DOMAIN_NAME=default -e OS_PROJECT_NAME=service -e OS_USERNAME=shipyard -e OS_USER_DOMAIN_NAME=default -e OS_IDENTITY_API_VERSION=3 --rm --net=host quay.io/airshipit/shipyard:165c845e3e7459d2a4892ed4ca910b00675e7561 commit configdocs
Error: Validations failed Reason: Validation
- Error: None
Message: Promenade unable to validate configdocs or an invalid response has been returned Diagnostic: HTTPError: 401 Client Error: Unauthorized for url: http://promenade-api.ucp.svc.cluster.local:80/api/v1.0/validatedesign
Best Regards,
Deepak Kataria
Airship-discuss mailing list Airship-discuss@lists.airshipit.org http://lists.airshipit.org/cgi-bin/mailman/listinfo/airship-discuss
Deepak,
I’ve also noticed that Shipyard image version quay.io/airshipit/shipyard:165c845e3e7459d2a4892ed4ca910b00675e7561 you use is quite outdated, 4 months old. Try to use more recent images, especially those, which are referenced in versions.yaml in the openstack/airship-treasuremap repository.
Best regards, — Roman Gorshunov
participants (2)
-
KATARIA, DEEPAK
-
Roman Gorshunov