Skip to content
This repository has been archived by the owner on Oct 20, 2022. It is now read-only.

Error while deploying simple nifi cluster. #49

Closed
vipmaha1 opened this issue Nov 27, 2020 · 11 comments
Closed

Error while deploying simple nifi cluster. #49

vipmaha1 opened this issue Nov 27, 2020 · 11 comments

Comments

@vipmaha1
Copy link

vipmaha1 commented Nov 27, 2020

Type of question

Getting error while deploying simple nifi cluster.
Unable to resolve simplenifi-headless serviec within DNS. Below message displayed in Operator logs.
"error":"Get "http://simplenifi-headless.nifi.svc.cluster.local:8080/nifi-api/controller/cluster\": dial tcp: lookup simplenifi-headless.nifi.svc.cluster.local on 10.96.0.10:53: no such host",

Question

What did you do?
Executed below steps:

  1. Referred the getting started doc, installed the prereqisites, 3 node zookeeper and cert-manager using helm install.
  2. Deployed the CRDs manully:
    kubectl apply -f https://raw.githubusercontent.com/Orange-OpenSource/nifikop/master/deploy/crds/v1/nifi.orange.com_nificlusters_crd.yaml
    kubectl apply -f https://raw.githubusercontent.com/Orange-OpenSource/nifikop/master/deploy/crds/v1/nifi.orange.com_nifiusers_crd.yaml
    kubectl apply -f https://raw.githubusercontent.com/Orange-OpenSource/nifikop/master/deploy/crds/v1/nifi.orange.com_nifiusergroups_crd.yaml
    kubectl apply -f https://raw.githubusercontent.com/Orange-OpenSource/nifikop/master/deploy/crds/v1/nifi.orange.com_nifidataflows_crd.yaml
    kubectl apply -f https://raw.githubusercontent.com/Orange-OpenSource/nifikop/master/deploy/crds/v1/nifi.orange.com_nifiparametercontexts_crd.yaml
    kubectl apply -f https://raw.githubusercontent.com/Orange-OpenSource/nifikop/master/deploy/crds/v1/nifi.orange.com_nifiregistryclients_crd.yaml
  3. Install the nifi operator using helm:
    helm install nifikop
    orange-incubator/nifikop
    --namespace=nifi
    --set namespaces={"nifi"}
    --set image.tag=v0.4.1-alpha-release
  4. Clone the repo, edit simplenificluster.yaml and then deployed a simple NiFi cluster.

Edit below properties:
spec.zkAddress: "nifikop-zk-zookeeper:2181"
spec.nodeConfigGroups.default_group.erviceAccountName: "nifikop"
spec.nodeConfigGroups.default_group.storageConfigs[].pvcSpec.storageClassName: "nfs-client"

Executed the deployment:
kubectl create -n nifi -f config/samples/simplenificluster.yaml

What did you expect to see?
Expecting two clusters nodes to be in running state as part of simplenifi deployment.

What did you see instead? Under which circumstances?
The simplenifi pod is in init state, there is no error reported in pod description.
Inspecting the operator logs, observing below error logs:
"error":"Get "http://simplenifi-headless.nifi.svc.cluster.local:8080/nifi-api/controller/cluster\": dial tcp: lookup simplenifi-headless.nifi.svc.cluster.local on 10.96.0.10:53: no such host",

Here is cluster status:

(base) ~/config/ams  kubectl -n nifi get all
NAME READY STATUS RESTARTS AGE
pod/nifikop-68646cd785-nxhkm 1/1 Running 0 17m
pod/nifikop-zk-zookeeper-0 1/1 Running 30 16d
pod/nifikop-zk-zookeeper-1 1/1 Running 30 16d
pod/nifikop-zk-zookeeper-2 1/1 Running 30 16d
pod/simplenifi-1-nodemn8fg 0/1 Init:0/1 0 6m11s
pod/simplenifi-2-node78nxj 0/1 Init:0/1 0 6m11s

NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE
service/nifikop-zk-zookeeper ClusterIP 10.98.53.129 2181/TCP,2888/TCP,3888/TCP 16d
service/nifikop-zk-zookeeper-headless ClusterIP None 2181/TCP,2888/TCP,3888/TCP 16d
service/simplenifi LoadBalancer 10.96.189.36 8080:32413/TCP,6007:32125/TCP,10000:32286/TCP 6m12s
service/simplenifi-headless ClusterIP None 8080/TCP,6007/TCP,10000/TCP 6m12s

NAME READY UP-TO-DATE AVAILABLE AGE
deployment.apps/nifikop 1/1 1 1 17m

NAME DESIRED CURRENT READY AGE
replicaset.apps/nifikop-68646cd785 1 1 1 17m

NAME READY AGE
statefulset.apps/nifikop-zk-zookeeper 3/3 16d
(base) ~/config/ams 

Environment

  • nifikop version:
    0.4.1-alpha-release

  • Kubernetes version information:

(base) ~/config/ams  kubectl --kubeconfig version
Client Version: version.Info{Major:"1", Minor:"19", GitVersion:"v1.19.4", GitCommit:"d360454c9bcd1634cf4cc52d1867af5491dc9c5f", GitTreeState:"clean", BuildDate:"2020-11-12T01:09:16Z", GoVersion:"go1.15.4", Compiler:"gc", Platform:"darwin/amd64"}
Server Version: version.Info{Major:"1", Minor:"16", GitVersion:"v1.16.3", GitCommit:"b3cbbae08ec52a7fc73d334838e18d17e8512749", GitTreeState:"clean", BuildDate:"2019-11-13T11:13:49Z", GoVersion:"go1.12.12", Compiler:"gc", Platform:"linux/amd64"}

  • Kubernetes cluster kind:
    On-prem k8s cluster, 3-nodes matter and 3-node worker

  • NiFi version:
    apache/nifi:1.12.1

Additional context
Observing similar behaviour in two separate environments.

@brunowego
Copy link

Same issue here.

@tty47
Copy link

tty47 commented Aug 5, 2021

hello!
same issue here, could you solve it?
I have zk and operator pods running but the nifi pods are in init state..

@vipmaha1
Copy link
Author

vipmaha1 commented Aug 5, 2021 via email

@tty47
Copy link

tty47 commented Aug 5, 2021

I just fixed it, I change the zkAddress in the NifiCluster manifest

@erdrix erdrix closed this as completed Oct 12, 2021
@Sreenivas-Ratakonda
Copy link

Sreenivas-Ratakonda commented Jan 7, 2022

Hi
I am facing the same issue in the secured nifi cluster.
I am not using OIDC here with OIDC my configuration is working fine but without OIDC I am facing following error.

Error: ERROR nifi_client Error during talking to nifi node {"error": "Get \"https://sslnifi-headless.nifi.svc.cluster.local:8443/nifi-api/controller/cluster\": dial tcp: lookup sslnifi-headless.nifi.svc.cluster.local on 10.100.0.10:53: no such host"

Logs:

2022-01-07T06:12:27.522854180Z 2022-01-07T06:12:27.522Z	ERROR	nifi_client	Error during talking to nifi node	{"error": "Get \"https://sslnifi-headless.nifi.svc.cluster.local:8443/nifi-api/controller/cluster\": dial tcp: lookup sslnifi-headless.nifi.svc.cluster.local on 10.100.0.10:53: no such host"}
2022-01-07T06:12:27.522891430Z github.com/go-logr/zapr.(*zapLogger).Error
2022-01-07T06:12:27.522896560Z 	/go/pkg/mod/github.com/go-logr/zapr@v0.2.0/zapr.go:132
2022-01-07T06:12:27.522901010Z github.com/Orange-OpenSource/nifikop/pkg/nificlient.errorGetOperation
2022-01-07T06:12:27.522905090Z 	/workspace/pkg/nificlient/common.go:43
2022-01-07T06:12:27.522916450Z github.com/Orange-OpenSource/nifikop/pkg/nificlient.(*nifiClient).DescribeCluster
2022-01-07T06:12:27.522920900Z 	/workspace/pkg/nificlient/system.go:30
2022-01-07T06:12:27.522924660Z github.com/Orange-OpenSource/nifikop/pkg/nificlient.(*nifiClient).Build
2022-01-07T06:12:27.522928320Z 	/workspace/pkg/nificlient/client.go:181
2022-01-07T06:12:27.522932140Z github.com/Orange-OpenSource/nifikop/pkg/nificlient.NewFromConfig
2022-01-07T06:12:27.522935560Z 	/workspace/pkg/nificlient/client.go:202
2022-01-07T06:12:27.522939090Z github.com/Orange-OpenSource/nifikop/pkg/common.NewClusterConnection
2022-01-07T06:12:27.522942860Z 	/workspace/pkg/common/common.go:54
2022-01-07T06:12:27.522946390Z github.com/Orange-OpenSource/nifikop/pkg/clientwrappers/scale.EnsureRemovedNodes
2022-01-07T06:12:27.522949640Z 	/workspace/pkg/clientwrappers/scale/scale.go:201
2022-01-07T06:12:27.522953240Z github.com/Orange-OpenSource/nifikop/pkg/resources/nifi.(*Reconciler).Reconcile
2022-01-07T06:12:27.522956690Z 	/workspace/pkg/resources/nifi/nifi.go:237
2022-01-07T06:12:27.522960500Z github.com/Orange-OpenSource/nifikop/controllers.(*NifiClusterReconciler).Reconcile
2022-01-07T06:12:27.522964280Z 	/workspace/controllers/nificluster_controller.go:131
2022-01-07T06:12:27.522968120Z sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler
2022-01-07T06:12:27.522971450Z 	/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.7.2/pkg/internal/controller/controller.go:263
2022-01-07T06:12:27.522974950Z sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem
2022-01-07T06:12:27.522978960Z 	/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.7.2/pkg/internal/controller/controller.go:235
2022-01-07T06:12:27.522983790Z sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func1.1
2022-01-07T06:12:27.522987710Z 	/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.7.2/pkg/internal/controller/controller.go:198
2022-01-07T06:12:27.522991470Z k8s.io/apimachinery/pkg/util/wait.JitterUntilWithContext.func1
2022-01-07T06:12:27.522994990Z 	/go/pkg/mod/k8s.io/apimachinery@v0.20.2/pkg/util/wait/wait.go:185
2022-01-07T06:12:27.522999290Z k8s.io/apimachinery/pkg/util/wait.BackoffUntil.func1
2022-01-07T06:12:27.523004510Z 	/go/pkg/mod/k8s.io/apimachinery@v0.20.2/pkg/util/wait/wait.go:155
2022-01-07T06:12:27.523008100Z k8s.io/apimachinery/pkg/util/wait.BackoffUntil
2022-01-07T06:12:27.523011410Z 	/go/pkg/mod/k8s.io/apimachinery@v0.20.2/pkg/util/wait/wait.go:156
2022-01-07T06:12:27.523014750Z k8s.io/apimachinery/pkg/util/wait.JitterUntil
2022-01-07T06:12:27.523017920Z 	/go/pkg/mod/k8s.io/apimachinery@v0.20.2/pkg/util/wait/wait.go:133
2022-01-07T06:12:27.523021220Z k8s.io/apimachinery/pkg/util/wait.JitterUntilWithContext
2022-01-07T06:12:27.523024440Z 	/go/pkg/mod/k8s.io/apimachinery@v0.20.2/pkg/util/wait/wait.go:185
2022-01-07T06:12:27.523051550Z k8s.io/apimachinery/pkg/util/wait.UntilWithContext
2022-01-07T06:12:27.523055200Z 	/go/pkg/mod/k8s.io/apimachinery@v0.20.2/pkg/util/wait/wait.go:99
2022-01-07T06:12:27.523058540Z 2022-01-07T06:12:27.522Z	INFO	controllers.NifiCluster	Nodes unreachable, may still be starting up
2022-01-07T06:12:36.299585319Z 2022-01-07T06:12:36.298Z	DEBUG	controller-runtime.manager.events	Normal	{"object": {"kind":"NifiUser","namespace":"nifi","name":"sslnifi-1-node.sslnifi-headless.nifi.svc.cluster.local","uid":"69e2e454-63c6-4b47-bdde-e9b895ad0a29","apiVersion":"nifi.orange.com/v1alpha1","resourceVersion":"71875025"}, "reason": "ReconcilingCertificate", "message": "Reconciling certificate for nifi user sslnifi-1-node.sslnifi-headless.nifi.svc.cluster.local"}
2022-01-07T06:12:36.308765681Z 2022-01-07T06:12:36.305Z	INFO	controllers.NifiUser	Cluster is not ready yet, will wait until it is.
2022-01-07T06:12:36.308805391Z 2022-01-07T06:12:36.305Z	DEBUG	controller-runtime.manager.events	Normal	{"object": {"kind":"NifiUser","namespace":"nifi","name":"sslnifi-1-node.sslnifi-headless.nifi.svc.cluster.local","uid":"69e2e454-63c6-4b47-bdde-e9b895ad0a29","apiVersion":"nifi.orange.com/v1alpha1","resourceVersion":"71875025"}, "reason": "ReconciledCertificate", "message": "Reconciled certificate for nifi user sslnifi-1-node.sslnifi-headless.nifi.svc.cluster.local"}
2022-01-07T06:12:36.308815581Z 2022-01-07T06:12:36.306Z	DEBUG	controller-runtime.manager.events	Normal	{"object": {"kind":"NifiUser","namespace":"nifi","name":"sslnifi-1-node.sslnifi-headless.nifi.svc.cluster.local","uid":"69e2e454-63c6-4b47-bdde-e9b895ad0a29","apiVersion":"nifi.orange.com/v1alpha1","resourceVersion":"71875025"}, "reason": "ReferenceClusterNotReady", "message": "The referenced cluster is not ready yet : sslnifi in sslnifi"}
2022-01-07T06:12:39.698039447Z 2022-01-07T06:12:39.697Z	DEBUG	controller-runtime.manager.events	Normal	{"object": {"kind":"NifiUser","namespace":"nifi","name":"sslnifi-controller.nifi.mgt.cluster.local","uid":"599e581c-80bb-43c5-97c1-e7c57c166c80","apiVersion":"nifi.orange.com/v1alpha1","resourceVersion":"71875017"}, "reason": "ReconcilingCertificate", "message": "Reconciling certificate for nifi user sslnifi-controller.nifi.mgt.cluster.local"}
2022-01-07T06:12:39.705176675Z 2022-01-07T06:12:39.705Z	DEBUG	controller-runtime.manager.events	Normal	{"object": {"kind":"NifiUser","namespace":"nifi","name":"sslnifi-controller.nifi.mgt.cluster.local","uid":"599e581c-80bb-43c5-97c1-e7c57c166c80","apiVersion":"nifi.orange.com/v1alpha1","resourceVersion":"71875017"}, "reason": "ReconciledCertificate", "message": "Reconciled certificate for nifi user sslnifi-controller.nifi.mgt.cluster.local"}
2022-01-07T06:12:39.705466366Z 2022-01-07T06:12:39.705Z	INFO	controllers.NifiUser	Cluster is not ready yet, will wait until it is.
2022-01-07T06:12:39.705739347Z 2022-01-07T06:12:39.705Z	DEBUG	controller-runtime.manager.events	Normal	{"object": {"kind":"NifiUser","namespace":"nifi","name":"sslnifi-controller.nifi.mgt.cluster.local","uid":"599e581c-80bb-43c5-97c1-e7c57c166c80","apiVersion":"nifi.orange.com/v1alpha1","resourceVersion":"71875017"}, "reason": "ReferenceClusterNotReady", "message": "The referenced cluster is not ready yet : sslnifi in sslnifi"}
2022-01-07T06:12:39.792571580Z 2022-01-07T06:12:39.792Z	DEBUG	controller-runtime.manager.events	Normal	{"object": {"kind":"NifiUser","namespace":"nifi","name":"sslnifi-2-node.sslnifi-headless.nifi.svc.cluster.local","uid":"d2c4f50f-1758-409d-82ac-515c351bfc40","apiVersion":"nifi.orange.com/v1alpha1","resourceVersion":"71875030"}, "reason": "ReconcilingCertificate", "message": "Reconciling certificate for nifi user sslnifi-2-node.sslnifi-headless.nifi.svc.cluster.local"}
2022-01-07T06:12:39.798635745Z 2022-01-07T06:12:39.798Z	DEBUG	controller-runtime.manager.events	Normal	{"object": {"kind":"NifiUser","namespace":"nifi","name":"sslnifi-2-node.sslnifi-headless.nifi.svc.cluster.local","uid":"d2c4f50f-1758-409d-82ac-515c351bfc40","apiVersion":"nifi.orange.com/v1alpha1","resourceVersion":"71875030"}, "reason": "ReconciledCertificate", "message": "Reconciled certificate for nifi user sslnifi-2-node.sslnifi-headless.nifi.svc.cluster.local"}
2022-01-07T06:12:39.798781516Z 2022-01-07T06:12:39.798Z	INFO	controllers.NifiUser	Cluster is not ready yet, will wait until it is.
2022-01-07T06:12:39.798815956Z 2022-01-07T06:12:39.798Z	DEBUG	controller-runtime.manager.events	Normal	{"object": {"kind":"NifiUser","namespace":"nifi","name":"sslnifi-2-node.sslnifi-headless.nifi.svc.cluster.local","uid":"d2c4f50f-1758-409d-82ac-515c351bfc40","apiVersion":"nifi.orange.com/v1alpha1","resourceVersion":"71875030"}, "reason": "ReferenceClusterNotReady", "message": "The referenced cluster is not ready yet : sslnifi in sslnifi"}
2022-01-07T06:12:42.535603172Z 2022-01-07T06:12:42.535Z	INFO	controllers.NifiCluster	CR status updated	{"status": "ClusterReconciling"}
2022-01-07T06:12:42.535625912Z 2022-01-07T06:12:42.535Z	DEBUG	controllers.NifiCluster	Reconciling	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi"}
2022-01-07T06:12:42.535671182Z 2022-01-07T06:12:42.535Z	INFO	controllers.NifiCluster	Reconciling cert-manager PKI	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi"}
2022-01-07T06:12:42.536581244Z 2022-01-07T06:12:42.536Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.Service", "name": "sslnifi-headless"}
2022-01-07T06:12:42.536595304Z 2022-01-07T06:12:42.536Z	INFO	controllers.NifiCluster	resource updated	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.Service", "name": "sslnifi-headless"}
2022-01-07T06:12:42.536899045Z 2022-01-07T06:12:42.536Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-07T06:12:42.537565567Z 2022-01-07T06:12:42.537Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-07T06:12:42.537577517Z 2022-01-07T06:12:42.537Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-07T06:12:42.538278248Z 2022-01-07T06:12:42.538Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-07T06:12:42.538298959Z 2022-01-07T06:12:42.538Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-07T06:12:42.538936200Z 2022-01-07T06:12:42.538Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-07T06:12:42.538944850Z 2022-01-07T06:12:42.538Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-07T06:12:42.539590802Z 2022-01-07T06:12:42.539Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-07T06:12:42.539599312Z 2022-01-07T06:12:42.539Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-07T06:12:42.540299093Z 2022-01-07T06:12:42.540Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-07T06:12:42.540306123Z 2022-01-07T06:12:42.540Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-07T06:12:42.540934065Z 2022-01-07T06:12:42.540Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-07T06:12:42.544464574Z 2022-01-07T06:12:42.544Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.Secret", "name": "sslnifi-config-1"}
2022-01-07T06:12:42.544490664Z 2022-01-07T06:12:42.544Z	INFO	controllers.NifiCluster	resource updated	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.Secret", "name": "sslnifi-config-1"}
2022-01-07T06:12:42.544732224Z 2022-01-07T06:12:42.544Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.Pod"}
2022-01-07T06:12:42.550773969Z 2022-01-07T06:12:42.550Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.Pod"}
2022-01-07T06:12:42.550961040Z 2022-01-07T06:12:42.550Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-07T06:12:42.552877004Z 2022-01-07T06:12:42.552Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-07T06:12:42.552958455Z 2022-01-07T06:12:42.552Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-07T06:12:42.554571778Z 2022-01-07T06:12:42.554Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-07T06:12:42.554638959Z 2022-01-07T06:12:42.554Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-07T06:12:42.556500923Z 2022-01-07T06:12:42.556Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-07T06:12:42.556513403Z 2022-01-07T06:12:42.556Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-07T06:12:42.557703706Z 2022-01-07T06:12:42.557Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-07T06:12:42.557747596Z 2022-01-07T06:12:42.557Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-07T06:12:42.558870579Z 2022-01-07T06:12:42.558Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-07T06:12:42.558886379Z 2022-01-07T06:12:42.558Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-07T06:12:42.559899442Z 2022-01-07T06:12:42.559Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-07T06:12:42.611604049Z 2022-01-07T06:12:42.611Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.Secret", "name": "sslnifi-config-2"}
2022-01-07T06:12:42.611638459Z 2022-01-07T06:12:42.611Z	INFO	controllers.NifiCluster	resource updated	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.Secret", "name": "sslnifi-config-2"}
2022-01-07T06:12:42.611954260Z 2022-01-07T06:12:42.611Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.Pod"}
2022-01-07T06:12:42.623148138Z 2022-01-07T06:12:42.622Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.Pod"}
2022-01-07T06:12:42.634449736Z 2022-01-07T06:12:42.634Z	ERROR	nifi_client	Error during talking to nifi node	{"error": "Get \"https://sslnifi-headless.nifi.svc.cluster.local:8443/nifi-api/controller/cluster\": dial tcp: lookup sslnifi-headless.nifi.svc.cluster.local on 10.100.0.10:53: no such host"}
2022-01-07T06:12:42.634508056Z github.com/go-logr/zapr.(*zapLogger).Error
2022-01-07T06:12:42.634512586Z 	/go/pkg/mod/github.com/go-logr/zapr@v0.2.0/zapr.go:132
2022-01-07T06:12:42.634515646Z github.com/Orange-OpenSource/nifikop/pkg/nificlient.errorGetOperation
2022-01-07T06:12:42.634518266Z 	/workspace/pkg/nificlient/common.go:43
2022-01-07T06:12:42.634520816Z github.com/Orange-OpenSource/nifikop/pkg/nificlient.(*nifiClient).DescribeCluster
2022-01-07T06:12:42.634523476Z 	/workspace/pkg/nificlient/system.go:30
2022-01-07T06:12:42.634525986Z github.com/Orange-OpenSource/nifikop/pkg/nificlient.(*nifiClient).Build
2022-01-07T06:12:42.634528496Z 	/workspace/pkg/nificlient/client.go:181
2022-01-07T06:12:42.634530966Z github.com/Orange-OpenSource/nifikop/pkg/nificlient.NewFromConfig
2022-01-07T06:12:42.634533486Z 	/workspace/pkg/nificlient/client.go:202
2022-01-07T06:12:42.634535936Z github.com/Orange-OpenSource/nifikop/pkg/common.NewClusterConnection
2022-01-07T06:12:42.634538446Z 	/workspace/pkg/common/common.go:54
2022-01-07T06:12:42.634540856Z github.com/Orange-OpenSource/nifikop/pkg/clientwrappers/scale.EnsureRemovedNodes
2022-01-07T06:12:42.634543366Z 	/workspace/pkg/clientwrappers/scale/scale.go:201
2022-01-07T06:12:42.634545826Z github.com/Orange-OpenSource/nifikop/pkg/resources/nifi.(*Reconciler).Reconcile
2022-01-07T06:12:42.634548386Z 	/workspace/pkg/resources/nifi/nifi.go:237
2022-01-07T06:12:42.634550846Z github.com/Orange-OpenSource/nifikop/controllers.(*NifiClusterReconciler).Reconcile
2022-01-07T06:12:42.634553336Z 	/workspace/controllers/nificluster_controller.go:131
2022-01-07T06:12:42.634555796Z sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler
2022-01-07T06:12:42.634558316Z 	/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.7.2/pkg/internal/controller/controller.go:263
2022-01-07T06:12:42.634560906Z sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem
2022-01-07T06:12:42.634563436Z 	/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.7.2/pkg/internal/controller/controller.go:235
2022-01-07T06:12:42.634582516Z sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func1.1
2022-01-07T06:12:42.634595336Z 	/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.7.2/pkg/internal/controller/controller.go:198
2022-01-07T06:12:42.634598206Z k8s.io/apimachinery/pkg/util/wait.JitterUntilWithContext.func1
2022-01-07T06:12:42.634600696Z 	/go/pkg/mod/k8s.io/apimachinery@v0.20.2/pkg/util/wait/wait.go:185
2022-01-07T06:12:42.634603236Z k8s.io/apimachinery/pkg/util/wait.BackoffUntil.func1
2022-01-07T06:12:42.634606876Z 	/go/pkg/mod/k8s.io/apimachinery@v0.20.2/pkg/util/wait/wait.go:155
2022-01-07T06:12:42.634609556Z k8s.io/apimachinery/pkg/util/wait.BackoffUntil
2022-01-07T06:12:42.634612096Z 	/go/pkg/mod/k8s.io/apimachinery@v0.20.2/pkg/util/wait/wait.go:156
2022-01-07T06:12:42.634614566Z k8s.io/apimachinery/pkg/util/wait.JitterUntil
2022-01-07T06:12:42.634617006Z 	/go/pkg/mod/k8s.io/apimachinery@v0.20.2/pkg/util/wait/wait.go:133
2022-01-07T06:12:42.634619486Z k8s.io/apimachinery/pkg/util/wait.JitterUntilWithContext
2022-01-07T06:12:42.634621926Z 	/go/pkg/mod/k8s.io/apimachinery@v0.20.2/pkg/util/wait/wait.go:185
2022-01-07T06:12:42.634624416Z k8s.io/apimachinery/pkg/util/wait.UntilWithContext
2022-01-07T06:12:42.634626906Z 	/go/pkg/mod/k8s.io/apimachinery@v0.20.2/pkg/util/wait/wait.go:99
2022-01-07T06:12:42.634629396Z 2022-01-07T06:12:42.634Z	INFO	controllers.NifiCluster	Nodes unreachable, may still be starting up

Cluster state:

  Service:
    Annotations:
      external-dns.alpha.kubernetes.io/ttl:  5
    Headless Enabled:                        true
  Zk Address:                                zookeeper.zookeeper.svc.cluster.local:2181
  Zk Path:                                   /sslnifinodes
Status:
  Nodes State:
    1:
      Configuration State:  ConfigInSync
      Graceful Action State:
        Task Started:     Fri, 7 Jan 2022 06:52:48 GMT
        Action State:     GracefulUpscaleRunning
        Action Step:      CONNECTING
        Error Message:
      Init Cluster Node:  true
      Pod Is Ready:       true
    2:
      Configuration State:  ConfigInSync
      Graceful Action State:
        Action State:     GracefulUpscaleRequired
        Error Message:
      Init Cluster Node:  true
      Pod Is Ready:       true
    3:
      Configuration State:  ConfigInSync
      Graceful Action State:
        Action State:     GracefulUpscaleRequired
        Error Message:
      Init Cluster Node:  true
      Pod Is Ready:       true
  Prometheus Reporting Task:
    Id:
    Version:  0
  Rolling Upgrade Status:
    Error Count:   0
    Last Success:
  State:           ClusterReconciling
Events:            <none>

My configuration:

# Depploy Classic Loadbalancer for headless service.
---
apiVersion: v1
kind: Service
metadata:
  name: sslnifi-all-headless
  annotations:
    external-dns.alpha.kubernetes.io/hostname: sslnifi.brilliobpc.com
    service.beta.kubernetes.io/aws-load-balancer-scheme: internet-facing      
spec:
  selector:
    app: nifi 
    nifi_cr: sslnifi
  ports:
  - name: https
    protocol: TCP
    port: 8443
    targetPort: 8443
  type: LoadBalancer

# standard nifi cluster.
---
apiVersion: nifi.orange.com/v1alpha1
kind: NifiCluster
metadata:
  name: sslnifi
spec:
  service:
    headlessEnabled: true
    annotations:
      external-dns.alpha.kubernetes.io/ttl: "5"
  zkAddress: "zookeeper.zookeeper.svc.cluster.local:2181"
  zkPath: "/sslnifinodes"
  clusterImage: "apache/nifi:1.12.1"
  oneNifiNodePerNode: false
  managedAdminUsers:
    -  identity : "CN=admin" 
       name: "admin"
  propagateLabels: true
  nifiClusterTaskSpec:
    retryDurationMinutes: 10
  readOnlyConfig:
    nifiProperties:
      webProxyHosts:
        - sslnifi.mydomain.com:8443
  nodeConfigGroups:
    default_group:
      isNode: true
      storageConfigs:
        - mountPath: "/opt/nifi/nifi-current/logs"
          name: logs
          pvcSpec:
            accessModes:
              - ReadWriteOnce
            storageClassName: "gp2"
            resources:
              requests:
                storage: 10Gi
        - mountPath: "/opt/nifi/data"
          name: data
          pvcSpec:
            accessModes:
              - ReadWriteOnce
            storageClassName: "gp2"
            resources:
              requests:
                storage: 10Gi
        - mountPath: "/opt/nifi/flowfile_repository"
          name: flowfile-repository
          pvcSpec:
            accessModes:
              - ReadWriteOnce
            storageClassName: "gp2"
            resources:
              requests:
                storage: 10Gi
        - mountPath: "/opt/nifi/nifi-current/conf"
          name: conf
          pvcSpec:
            accessModes:
              - ReadWriteOnce
            storageClassName: "gp2"
            resources:
              requests:
                storage: 10Gi
        - mountPath: "/opt/nifi/content_repository"
          name: content-repository
          pvcSpec:
            accessModes:
              - ReadWriteOnce
            storageClassName: "gp2"
            resources:
              requests:
                storage: 10Gi
        - mountPath: "/opt/nifi/provenance_repository"
          name: provenance-repository
          pvcSpec:
            accessModes:
              - ReadWriteOnce
            storageClassName: "gp2"
            resources:
              requests:
                storage: 10Gi
      serviceAccountName: "default"
      resourcesRequirements:
        limits:
          cpu: "0.5"
          memory: 2Gi
        requests:
          cpu: "0.5"
          memory: 2Gi
  nodes:
    - id: 1
      nodeConfigGroup: "default_group"
    - id: 2
      nodeConfigGroup: "default_group"
    - id: 3
      nodeConfigGroup: "default_group"
  
  listenersConfig:
    internalListeners:
      - type: "https"
        name: "https"
        containerPort: 8443     
      - type: "cluster"
        name: "cluster"
        containerPort: 6007
      - type: "s2s"
        name: "s2s"
        containerPort: 10000
    sslSecrets:
      tlsSecretName: "test-nifikop"
      create: true

@Sreenivas-Ratakonda
Copy link

Hi All

I am facing the same issue : in secured nifi clustered if I remove the OIDC config with OIDC the cluster is running Fine
But in org we cant use the OIDC as of now.

Really appreciate it if some could help out here.
Error: nifi_client Error during talking to nifi node {"error": "Get \"https://sslnifi-headless.nifi.svc.cluster.local:8443/nifi-api/controller/cluster\": dial tcp: lookup sslnifi-headless.nifi.svc.cluster.local on 10.100.0.10:53: no such host"}

LOGS:


2022-01-07T06:12:27.522854180Z 2022-01-07T06:12:27.522Z	ERROR	nifi_client	Error during talking to nifi node	{"error": "Get \"https://sslnifi-headless.nifi.svc.cluster.local:8443/nifi-api/controller/cluster\": dial tcp: lookup sslnifi-headless.nifi.svc.cluster.local on 10.100.0.10:53: no such host"}
2022-01-07T06:12:27.522891430Z github.com/go-logr/zapr.(*zapLogger).Error
2022-01-07T06:12:27.522896560Z 	/go/pkg/mod/github.com/go-logr/zapr@v0.2.0/zapr.go:132
2022-01-07T06:12:27.522901010Z github.com/Orange-OpenSource/nifikop/pkg/nificlient.errorGetOperation
2022-01-07T06:12:27.522905090Z 	/workspace/pkg/nificlient/common.go:43
2022-01-07T06:12:27.522916450Z github.com/Orange-OpenSource/nifikop/pkg/nificlient.(*nifiClient).DescribeCluster
2022-01-07T06:12:27.522920900Z 	/workspace/pkg/nificlient/system.go:30
2022-01-07T06:12:27.522924660Z github.com/Orange-OpenSource/nifikop/pkg/nificlient.(*nifiClient).Build
2022-01-07T06:12:27.522928320Z 	/workspace/pkg/nificlient/client.go:181
2022-01-07T06:12:27.522932140Z github.com/Orange-OpenSource/nifikop/pkg/nificlient.NewFromConfig
2022-01-07T06:12:27.522935560Z 	/workspace/pkg/nificlient/client.go:202
2022-01-07T06:12:27.522939090Z github.com/Orange-OpenSource/nifikop/pkg/common.NewClusterConnection
2022-01-07T06:12:27.522942860Z 	/workspace/pkg/common/common.go:54
2022-01-07T06:12:27.522946390Z github.com/Orange-OpenSource/nifikop/pkg/clientwrappers/scale.EnsureRemovedNodes
2022-01-07T06:12:27.522949640Z 	/workspace/pkg/clientwrappers/scale/scale.go:201
2022-01-07T06:12:27.522953240Z github.com/Orange-OpenSource/nifikop/pkg/resources/nifi.(*Reconciler).Reconcile
2022-01-07T06:12:27.522956690Z 	/workspace/pkg/resources/nifi/nifi.go:237
2022-01-07T06:12:27.522960500Z github.com/Orange-OpenSource/nifikop/controllers.(*NifiClusterReconciler).Reconcile
2022-01-07T06:12:27.522964280Z 	/workspace/controllers/nificluster_controller.go:131
2022-01-07T06:12:27.522968120Z sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler
2022-01-07T06:12:27.522971450Z 	/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.7.2/pkg/internal/controller/controller.go:263
2022-01-07T06:12:27.522974950Z sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem
2022-01-07T06:12:27.522978960Z 	/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.7.2/pkg/internal/controller/controller.go:235
2022-01-07T06:12:27.522983790Z sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func1.1
2022-01-07T06:12:27.522987710Z 	/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.7.2/pkg/internal/controller/controller.go:198
2022-01-07T06:12:27.522991470Z k8s.io/apimachinery/pkg/util/wait.JitterUntilWithContext.func1
2022-01-07T06:12:27.522994990Z 	/go/pkg/mod/k8s.io/apimachinery@v0.20.2/pkg/util/wait/wait.go:185
2022-01-07T06:12:27.522999290Z k8s.io/apimachinery/pkg/util/wait.BackoffUntil.func1
2022-01-07T06:12:27.523004510Z 	/go/pkg/mod/k8s.io/apimachinery@v0.20.2/pkg/util/wait/wait.go:155
2022-01-07T06:12:27.523008100Z k8s.io/apimachinery/pkg/util/wait.BackoffUntil
2022-01-07T06:12:27.523011410Z 	/go/pkg/mod/k8s.io/apimachinery@v0.20.2/pkg/util/wait/wait.go:156
2022-01-07T06:12:27.523014750Z k8s.io/apimachinery/pkg/util/wait.JitterUntil
2022-01-07T06:12:27.523017920Z 	/go/pkg/mod/k8s.io/apimachinery@v0.20.2/pkg/util/wait/wait.go:133
2022-01-07T06:12:27.523021220Z k8s.io/apimachinery/pkg/util/wait.JitterUntilWithContext
2022-01-07T06:12:27.523024440Z 	/go/pkg/mod/k8s.io/apimachinery@v0.20.2/pkg/util/wait/wait.go:185
2022-01-07T06:12:27.523051550Z k8s.io/apimachinery/pkg/util/wait.UntilWithContext
2022-01-07T06:12:27.523055200Z 	/go/pkg/mod/k8s.io/apimachinery@v0.20.2/pkg/util/wait/wait.go:99
2022-01-07T06:12:27.523058540Z 2022-01-07T06:12:27.522Z	INFO	controllers.NifiCluster	Nodes unreachable, may still be starting up
2022-01-07T06:12:36.299585319Z 2022-01-07T06:12:36.298Z	DEBUG	controller-runtime.manager.events	Normal	{"object": {"kind":"NifiUser","namespace":"nifi","name":"sslnifi-1-node.sslnifi-headless.nifi.svc.cluster.local","uid":"69e2e454-63c6-4b47-bdde-e9b895ad0a29","apiVersion":"nifi.orange.com/v1alpha1","resourceVersion":"71875025"}, "reason": "ReconcilingCertificate", "message": "Reconciling certificate for nifi user sslnifi-1-node.sslnifi-headless.nifi.svc.cluster.local"}
2022-01-07T06:12:36.308765681Z 2022-01-07T06:12:36.305Z	INFO	controllers.NifiUser	Cluster is not ready yet, will wait until it is.
2022-01-07T06:12:36.308805391Z 2022-01-07T06:12:36.305Z	DEBUG	controller-runtime.manager.events	Normal	{"object": {"kind":"NifiUser","namespace":"nifi","name":"sslnifi-1-node.sslnifi-headless.nifi.svc.cluster.local","uid":"69e2e454-63c6-4b47-bdde-e9b895ad0a29","apiVersion":"nifi.orange.com/v1alpha1","resourceVersion":"71875025"}, "reason": "ReconciledCertificate", "message": "Reconciled certificate for nifi user sslnifi-1-node.sslnifi-headless.nifi.svc.cluster.local"}
2022-01-07T06:12:36.308815581Z 2022-01-07T06:12:36.306Z	DEBUG	controller-runtime.manager.events	Normal	{"object": {"kind":"NifiUser","namespace":"nifi","name":"sslnifi-1-node.sslnifi-headless.nifi.svc.cluster.local","uid":"69e2e454-63c6-4b47-bdde-e9b895ad0a29","apiVersion":"nifi.orange.com/v1alpha1","resourceVersion":"71875025"}, "reason": "ReferenceClusterNotReady", "message": "The referenced cluster is not ready yet : sslnifi in sslnifi"}
2022-01-07T06:12:39.698039447Z 2022-01-07T06:12:39.697Z	DEBUG	controller-runtime.manager.events	Normal	{"object": {"kind":"NifiUser","namespace":"nifi","name":"sslnifi-controller.nifi.mgt.cluster.local","uid":"599e581c-80bb-43c5-97c1-e7c57c166c80","apiVersion":"nifi.orange.com/v1alpha1","resourceVersion":"71875017"}, "reason": "ReconcilingCertificate", "message": "Reconciling certificate for nifi user sslnifi-controller.nifi.mgt.cluster.local"}
2022-01-07T06:12:39.705176675Z 2022-01-07T06:12:39.705Z	DEBUG	controller-runtime.manager.events	Normal	{"object": {"kind":"NifiUser","namespace":"nifi","name":"sslnifi-controller.nifi.mgt.cluster.local","uid":"599e581c-80bb-43c5-97c1-e7c57c166c80","apiVersion":"nifi.orange.com/v1alpha1","resourceVersion":"71875017"}, "reason": "ReconciledCertificate", "message": "Reconciled certificate for nifi user sslnifi-controller.nifi.mgt.cluster.local"}
2022-01-07T06:12:39.705466366Z 2022-01-07T06:12:39.705Z	INFO	controllers.NifiUser	Cluster is not ready yet, will wait until it is.
2022-01-07T06:12:39.705739347Z 2022-01-07T06:12:39.705Z	DEBUG	controller-runtime.manager.events	Normal	{"object": {"kind":"NifiUser","namespace":"nifi","name":"sslnifi-controller.nifi.mgt.cluster.local","uid":"599e581c-80bb-43c5-97c1-e7c57c166c80","apiVersion":"nifi.orange.com/v1alpha1","resourceVersion":"71875017"}, "reason": "ReferenceClusterNotReady", "message": "The referenced cluster is not ready yet : sslnifi in sslnifi"}
2022-01-07T06:12:39.792571580Z 2022-01-07T06:12:39.792Z	DEBUG	controller-runtime.manager.events	Normal	{"object": {"kind":"NifiUser","namespace":"nifi","name":"sslnifi-2-node.sslnifi-headless.nifi.svc.cluster.local","uid":"d2c4f50f-1758-409d-82ac-515c351bfc40","apiVersion":"nifi.orange.com/v1alpha1","resourceVersion":"71875030"}, "reason": "ReconcilingCertificate", "message": "Reconciling certificate for nifi user sslnifi-2-node.sslnifi-headless.nifi.svc.cluster.local"}
2022-01-07T06:12:39.798635745Z 2022-01-07T06:12:39.798Z	DEBUG	controller-runtime.manager.events	Normal	{"object": {"kind":"NifiUser","namespace":"nifi","name":"sslnifi-2-node.sslnifi-headless.nifi.svc.cluster.local","uid":"d2c4f50f-1758-409d-82ac-515c351bfc40","apiVersion":"nifi.orange.com/v1alpha1","resourceVersion":"71875030"}, "reason": "ReconciledCertificate", "message": "Reconciled certificate for nifi user sslnifi-2-node.sslnifi-headless.nifi.svc.cluster.local"}
2022-01-07T06:12:39.798781516Z 2022-01-07T06:12:39.798Z	INFO	controllers.NifiUser	Cluster is not ready yet, will wait until it is.
2022-01-07T06:12:39.798815956Z 2022-01-07T06:12:39.798Z	DEBUG	controller-runtime.manager.events	Normal	{"object": {"kind":"NifiUser","namespace":"nifi","name":"sslnifi-2-node.sslnifi-headless.nifi.svc.cluster.local","uid":"d2c4f50f-1758-409d-82ac-515c351bfc40","apiVersion":"nifi.orange.com/v1alpha1","resourceVersion":"71875030"}, "reason": "ReferenceClusterNotReady", "message": "The referenced cluster is not ready yet : sslnifi in sslnifi"}
2022-01-07T06:12:42.535603172Z 2022-01-07T06:12:42.535Z	INFO	controllers.NifiCluster	CR status updated	{"status": "ClusterReconciling"}
2022-01-07T06:12:42.535625912Z 2022-01-07T06:12:42.535Z	DEBUG	controllers.NifiCluster	Reconciling	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi"}
2022-01-07T06:12:42.535671182Z 2022-01-07T06:12:42.535Z	INFO	controllers.NifiCluster	Reconciling cert-manager PKI	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi"}
2022-01-07T06:12:42.536581244Z 2022-01-07T06:12:42.536Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.Service", "name": "sslnifi-headless"}
2022-01-07T06:12:42.536595304Z 2022-01-07T06:12:42.536Z	INFO	controllers.NifiCluster	resource updated	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.Service", "name": "sslnifi-headless"}
2022-01-07T06:12:42.536899045Z 2022-01-07T06:12:42.536Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-07T06:12:42.537565567Z 2022-01-07T06:12:42.537Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-07T06:12:42.537577517Z 2022-01-07T06:12:42.537Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-07T06:12:42.538278248Z 2022-01-07T06:12:42.538Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-07T06:12:42.538298959Z 2022-01-07T06:12:42.538Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-07T06:12:42.538936200Z 2022-01-07T06:12:42.538Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-07T06:12:42.538944850Z 2022-01-07T06:12:42.538Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-07T06:12:42.539590802Z 2022-01-07T06:12:42.539Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-07T06:12:42.539599312Z 2022-01-07T06:12:42.539Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-07T06:12:42.540299093Z 2022-01-07T06:12:42.540Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-07T06:12:42.540306123Z 2022-01-07T06:12:42.540Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-07T06:12:42.540934065Z 2022-01-07T06:12:42.540Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-07T06:12:42.544464574Z 2022-01-07T06:12:42.544Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.Secret", "name": "sslnifi-config-1"}
2022-01-07T06:12:42.544490664Z 2022-01-07T06:12:42.544Z	INFO	controllers.NifiCluster	resource updated	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.Secret", "name": "sslnifi-config-1"}
2022-01-07T06:12:42.544732224Z 2022-01-07T06:12:42.544Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.Pod"}
2022-01-07T06:12:42.550773969Z 2022-01-07T06:12:42.550Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.Pod"}
2022-01-07T06:12:42.550961040Z 2022-01-07T06:12:42.550Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-07T06:12:42.552877004Z 2022-01-07T06:12:42.552Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-07T06:12:42.552958455Z 2022-01-07T06:12:42.552Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-07T06:12:42.554571778Z 2022-01-07T06:12:42.554Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-07T06:12:42.554638959Z 2022-01-07T06:12:42.554Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-07T06:12:42.556500923Z 2022-01-07T06:12:42.556Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-07T06:12:42.556513403Z 2022-01-07T06:12:42.556Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-07T06:12:42.557703706Z 2022-01-07T06:12:42.557Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-07T06:12:42.557747596Z 2022-01-07T06:12:42.557Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-07T06:12:42.558870579Z 2022-01-07T06:12:42.558Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-07T06:12:42.558886379Z 2022-01-07T06:12:42.558Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-07T06:12:42.559899442Z 2022-01-07T06:12:42.559Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-07T06:12:42.611604049Z 2022-01-07T06:12:42.611Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.Secret", "name": "sslnifi-config-2"}
2022-01-07T06:12:42.611638459Z 2022-01-07T06:12:42.611Z	INFO	controllers.NifiCluster	resource updated	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.Secret", "name": "sslnifi-config-2"}
2022-01-07T06:12:42.611954260Z 2022-01-07T06:12:42.611Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.Pod"}
2022-01-07T06:12:42.623148138Z 2022-01-07T06:12:42.622Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.Pod"}
2022-01-07T06:12:42.634449736Z 2022-01-07T06:12:42.634Z	ERROR	nifi_client	Error during talking to nifi node	{"error": "Get \"https://sslnifi-headless.nifi.svc.cluster.local:8443/nifi-api/controller/cluster\": dial tcp: lookup sslnifi-headless.nifi.svc.cluster.local on 10.100.0.10:53: no such host"}
2022-01-07T06:12:42.634508056Z github.com/go-logr/zapr.(*zapLogger).Error
2022-01-07T06:12:42.634512586Z 	/go/pkg/mod/github.com/go-logr/zapr@v0.2.0/zapr.go:132
2022-01-07T06:12:42.634515646Z github.com/Orange-OpenSource/nifikop/pkg/nificlient.errorGetOperation
2022-01-07T06:12:42.634518266Z 	/workspace/pkg/nificlient/common.go:43
2022-01-07T06:12:42.634520816Z github.com/Orange-OpenSource/nifikop/pkg/nificlient.(*nifiClient).DescribeCluster
2022-01-07T06:12:42.634523476Z 	/workspace/pkg/nificlient/system.go:30
2022-01-07T06:12:42.634525986Z github.com/Orange-OpenSource/nifikop/pkg/nificlient.(*nifiClient).Build
2022-01-07T06:12:42.634528496Z 	/workspace/pkg/nificlient/client.go:181
2022-01-07T06:12:42.634530966Z github.com/Orange-OpenSource/nifikop/pkg/nificlient.NewFromConfig
2022-01-07T06:12:42.634533486Z 	/workspace/pkg/nificlient/client.go:202
2022-01-07T06:12:42.634535936Z github.com/Orange-OpenSource/nifikop/pkg/common.NewClusterConnection
2022-01-07T06:12:42.634538446Z 	/workspace/pkg/common/common.go:54
2022-01-07T06:12:42.634540856Z github.com/Orange-OpenSource/nifikop/pkg/clientwrappers/scale.EnsureRemovedNodes
2022-01-07T06:12:42.634543366Z 	/workspace/pkg/clientwrappers/scale/scale.go:201
2022-01-07T06:12:42.634545826Z github.com/Orange-OpenSource/nifikop/pkg/resources/nifi.(*Reconciler).Reconcile
2022-01-07T06:12:42.634548386Z 	/workspace/pkg/resources/nifi/nifi.go:237
2022-01-07T06:12:42.634550846Z github.com/Orange-OpenSource/nifikop/controllers.(*NifiClusterReconciler).Reconcile
2022-01-07T06:12:42.634553336Z 	/workspace/controllers/nificluster_controller.go:131
2022-01-07T06:12:42.634555796Z sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler
2022-01-07T06:12:42.634558316Z 	/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.7.2/pkg/internal/controller/controller.go:263
2022-01-07T06:12:42.634560906Z sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem
2022-01-07T06:12:42.634563436Z 	/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.7.2/pkg/internal/controller/controller.go:235
2022-01-07T06:12:42.634582516Z sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func1.1
2022-01-07T06:12:42.634595336Z 	/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.7.2/pkg/internal/controller/controller.go:198
2022-01-07T06:12:42.634598206Z k8s.io/apimachinery/pkg/util/wait.JitterUntilWithContext.func1
2022-01-07T06:12:42.634600696Z 	/go/pkg/mod/k8s.io/apimachinery@v0.20.2/pkg/util/wait/wait.go:185
2022-01-07T06:12:42.634603236Z k8s.io/apimachinery/pkg/util/wait.BackoffUntil.func1
2022-01-07T06:12:42.634606876Z 	/go/pkg/mod/k8s.io/apimachinery@v0.20.2/pkg/util/wait/wait.go:155
2022-01-07T06:12:42.634609556Z k8s.io/apimachinery/pkg/util/wait.BackoffUntil
2022-01-07T06:12:42.634612096Z 	/go/pkg/mod/k8s.io/apimachinery@v0.20.2/pkg/util/wait/wait.go:156
2022-01-07T06:12:42.634614566Z k8s.io/apimachinery/pkg/util/wait.JitterUntil
2022-01-07T06:12:42.634617006Z 	/go/pkg/mod/k8s.io/apimachinery@v0.20.2/pkg/util/wait/wait.go:133
2022-01-07T06:12:42.634619486Z k8s.io/apimachinery/pkg/util/wait.JitterUntilWithContext
2022-01-07T06:12:42.634621926Z 	/go/pkg/mod/k8s.io/apimachinery@v0.20.2/pkg/util/wait/wait.go:185
2022-01-07T06:12:42.634624416Z k8s.io/apimachinery/pkg/util/wait.UntilWithContext
2022-01-07T06:12:42.634626906Z 	/go/pkg/mod/k8s.io/apimachinery@v0.20.2/pkg/util/wait/wait.go:99
2022-01-07T06:12:42.634629396Z 2022-01-07T06:12:42.634Z	INFO	controllers.NifiCluster	Nodes unreachable, may still be starting up

Nificluster state:

  Service:
    Annotations:
      external-dns.alpha.kubernetes.io/ttl:  5
    Headless Enabled:                        true
  Zk Address:                                zookeeper.zookeeper.svc.cluster.local:2181
  Zk Path:                                   /sslnifinodes
Status:
  Nodes State:
    1:
      Configuration State:  ConfigInSync
      Graceful Action State:
        Task Started:     Fri, 7 Jan 2022 06:52:48 GMT
        Action State:     GracefulUpscaleRunning
        Action Step:      CONNECTING
        Error Message:
      Init Cluster Node:  true
      Pod Is Ready:       true
    2:
      Configuration State:  ConfigInSync
      Graceful Action State:
        Action State:     GracefulUpscaleRequired
        Error Message:
      Init Cluster Node:  true
      Pod Is Ready:       true
    3:
      Configuration State:  ConfigInSync
      Graceful Action State:
        Action State:     GracefulUpscaleRequired
        Error Message:
      Init Cluster Node:  true
      Pod Is Ready:       true
  Prometheus Reporting Task:
    Id:
    Version:  0
  Rolling Upgrade Status:
    Error Count:   0
    Last Success:
  State:           ClusterReconciling
Events:            <none>

MY CONFIGURATION:

# Depploy Classic Loadbalancer for headless service.
---
apiVersion: v1
kind: Service
metadata:
  name: sslnifi-all-headless
  annotations:
    external-dns.alpha.kubernetes.io/hostname: sslnifi.mydomain.com
    service.beta.kubernetes.io/aws-load-balancer-scheme: internet-facing      
spec:
  selector:
    app: nifi 
    nifi_cr: sslnifi
  ports:
  - name: https
    protocol: TCP
    port: 8443
    targetPort: 8443
  type: LoadBalancer

# standard nifi cluster.
---
apiVersion: nifi.orange.com/v1alpha1
kind: NifiCluster
metadata:
  name: sslnifi
spec:
  service:
    headlessEnabled: true
    annotations:
      external-dns.alpha.kubernetes.io/ttl: "5"
  zkAddress: "zookeeper.zookeeper.svc.cluster.local:2181"
  zkPath: "/sslnifinodes"
  clusterImage: "apache/nifi:1.12.1"
  oneNifiNodePerNode: false
  managedAdminUsers:
    -  identity : "CN=admin"  # Admin users are not getting created.
       name: "admin"
  propagateLabels: true
  nifiClusterTaskSpec:
    retryDurationMinutes: 10
  readOnlyConfig:
    nifiProperties:
      webProxyHosts:
        - sslnifi.mydomain.com:8443
  nodeConfigGroups:
    default_group:
      isNode: true
      storageConfigs:
        - mountPath: "/opt/nifi/nifi-current/logs"
          name: logs
          pvcSpec:
            accessModes:
              - ReadWriteOnce
            storageClassName: "gp2"
            resources:
              requests:
                storage: 10Gi
        - mountPath: "/opt/nifi/data"
          name: data
          pvcSpec:
            accessModes:
              - ReadWriteOnce
            storageClassName: "gp2"
            resources:
              requests:
                storage: 10Gi
        - mountPath: "/opt/nifi/flowfile_repository"
          name: flowfile-repository
          pvcSpec:
            accessModes:
              - ReadWriteOnce
            storageClassName: "gp2"
            resources:
              requests:
                storage: 10Gi
        - mountPath: "/opt/nifi/nifi-current/conf"
          name: conf
          pvcSpec:
            accessModes:
              - ReadWriteOnce
            storageClassName: "gp2"
            resources:
              requests:
                storage: 10Gi
        - mountPath: "/opt/nifi/content_repository"
          name: content-repository
          pvcSpec:
            accessModes:
              - ReadWriteOnce
            storageClassName: "gp2"
            resources:
              requests:
                storage: 10Gi
        - mountPath: "/opt/nifi/provenance_repository"
          name: provenance-repository
          pvcSpec:
            accessModes:
              - ReadWriteOnce
            storageClassName: "gp2"
            resources:
              requests:
                storage: 10Gi
      serviceAccountName: "default"
      resourcesRequirements:
        limits:
          cpu: "0.5"
          memory: 2Gi
        requests:
          cpu: "0.5"
          memory: 2Gi
  nodes:
    - id: 1
      nodeConfigGroup: "default_group"
    - id: 2
      nodeConfigGroup: "default_group"
    - id: 3
      nodeConfigGroup: "default_group"
  
  listenersConfig:
    internalListeners:
      - type: "https"
        name: "https"
        containerPort: 8443     
      - type: "cluster"
        name: "cluster"
        containerPort: 6007
      - type: "s2s"
        name: "s2s"
        containerPort: 10000
    sslSecrets:
      tlsSecretName: "test-nifikop"
      create: true

@tty47
Copy link

tty47 commented Jan 8, 2022

Hello @Sreenivas-Ratakonda

In a first check, I can see that your Service name is different to the one you're trying to reach from Nifi

---
apiVersion: v1
kind: Service
metadata:
  name: sslnifi-all-headless # HERE
  annotations:
    external-dns.alpha.kubernetes.io/hostname: sslnifi.mydomain.com
    service.beta.kubernetes.io/aws-load-balancer-scheme: internet-facing      
spec:
  selector:
    app: nifi 
    nifi_cr: sslnifi
  ports:
  - name: https
    protocol: TCP
    port: 8443
    targetPort: 8443
  type: LoadBalancer

# standard nifi cluster.
---

In the logs, you can see that you're trying to reach:
Error: nifi_client Error during talking to nifi node {"error": "Get " https://sslnifi-headless.nifi.svc .cluster.local:8443/nifi-api/controller/cluster": dial tcp: lookup sslnifi-headless.nifi.svc.cluster.local on 10.100.0.10:53: no such host"}

Instead of: sslnifi-all-headless

Try to modify this one and deploy it again

Let me know how is after this change ;)

@tty47
Copy link

tty47 commented Jan 8, 2022

@Sreenivas-Ratakonda

Check this comment: #49 (comment)

I think is the same issue, the var reference is not the right one

@Sreenivas-Ratakonda
Copy link

Sreenivas-Ratakonda commented Jan 9, 2022

@jrmanes

below is the aws loadbalancer config, I am mapping aws load balancer with headless service (sslnifi-headless) created by nifikop
already the sslnifi-headless service is up and running.

---
apiVersion: v1
kind: Service
metadata:
  name: sslnifi-all-headless # HERE
  annotations:
    external-dns.alpha.kubernetes.io/hostname: sslnifi.mydomain.com
    service.beta.kubernetes.io/aws-load-balancer-scheme: internet-facing      
spec:
  selector:
    app: nifi 
    nifi_cr: sslnifi
  ports:
  - name: https
    protocol: TCP
    port: 8443
    targetPort: 8443
  type: LoadBalancer

the problem here is nifikop is not able to verify the cluster state:

This the logs I am getting :

github.com/go-logr/zapr.(*zapLogger).Error
	/go/pkg/mod/github.com/go-logr/zapr@v0.2.0/zapr.go:132
github.com/Orange-OpenSource/nifikop/pkg/nificlient.errorGetOperation
	/workspace/pkg/nificlient/common.go:38
github.com/Orange-OpenSource/nifikop/pkg/nificlient.(*nifiClient).DescribeCluster
	/workspace/pkg/nificlient/system.go:30
github.com/Orange-OpenSource/nifikop/pkg/nificlient.(*nifiClient).Build
	/workspace/pkg/nificlient/client.go:181
github.com/Orange-OpenSource/nifikop/pkg/nificlient.NewFromConfig
	/workspace/pkg/nificlient/client.go:202
github.com/Orange-OpenSource/nifikop/pkg/common.NewClusterConnection
	/workspace/pkg/common/common.go:54
github.com/Orange-OpenSource/nifikop/pkg/clientwrappers/scale.EnsureRemovedNodes
	/workspace/pkg/clientwrappers/scale/scale.go:201
github.com/Orange-OpenSource/nifikop/pkg/resources/nifi.(*Reconciler).Reconcile
	/workspace/pkg/resources/nifi/nifi.go:237
github.com/Orange-OpenSource/nifikop/controllers.(*NifiClusterReconciler).Reconcile
	/workspace/controllers/nificluster_controller.go:131
sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler
	/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.7.2/pkg/internal/controller/controller.go:263
sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem
	/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.7.2/pkg/internal/controller/controller.go:235
sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func1.1
	/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.7.2/pkg/internal/controller/controller.go:198
k8s.io/apimachinery/pkg/util/wait.JitterUntilWithContext.func1
	/go/pkg/mod/k8s.io/apimachinery@v0.20.2/pkg/util/wait/wait.go:185
k8s.io/apimachinery/pkg/util/wait.BackoffUntil.func1
	/go/pkg/mod/k8s.io/apimachinery@v0.20.2/pkg/util/wait/wait.go:155
k8s.io/apimachinery/pkg/util/wait.BackoffUntil
	/go/pkg/mod/k8s.io/apimachinery@v0.20.2/pkg/util/wait/wait.go:156
k8s.io/apimachinery/pkg/util/wait.JitterUntil
	/go/pkg/mod/k8s.io/apimachinery@v0.20.2/pkg/util/wait/wait.go:133
k8s.io/apimachinery/pkg/util/wait.JitterUntilWithContext
	/go/pkg/mod/k8s.io/apimachinery@v0.20.2/pkg/util/wait/wait.go:185
k8s.io/apimachinery/pkg/util/wait.UntilWithContext
	/go/pkg/mod/k8s.io/apimachinery@v0.20.2/pkg/util/wait/wait.go:99
2022-01-09T09:28:45.477Z	INFO	controllers.NifiCluster	Nodes unreachable, may still be starting up
2022-01-09T09:28:47.968Z	DEBUG	controller-runtime.manager.events	Normal	{"object": {"kind":"NifiUser","namespace":"nifi","name":"sslnifi-controller.nifi.mgt.cluster.local","uid":"7ba70d19-47cb-4452-b128-d3aae4e3aae6","apiVersion":"nifi.orange.com/v1alpha1","resourceVersion":"72791563"}, "reason": "ReconcilingCertificate", "message": "Reconciling certificate for nifi user sslnifi-controller.nifi.mgt.cluster.local"}
2022-01-09T09:28:47.973Z	DEBUG	controller-runtime.manager.events	Normal	{"object": {"kind":"NifiUser","namespace":"nifi","name":"sslnifi-controller.nifi.mgt.cluster.local","uid":"7ba70d19-47cb-4452-b128-d3aae4e3aae6","apiVersion":"nifi.orange.com/v1alpha1","resourceVersion":"72791563"}, "reason": "ReconciledCertificate", "message": "Reconciled certificate for nifi user sslnifi-controller.nifi.mgt.cluster.local"}
2022-01-09T09:28:47.974Z	INFO	controllers.NifiUser	Cluster is not ready yet, will wait until it is.
2022-01-09T09:28:45.477Z	INFO	controllers.NifiCluster	Nodes unreachable, may still be starting up
2022-01-09T09:28:47.968Z	DEBUG	controller-runtime.manager.events	Normal	{"object": {"kind":"NifiUser","namespace":"nifi","name":"sslnifi-controller.nifi.mgt.cluster.local","uid":"7ba70d19-47cb-4452-b128-d3aae4e3aae6","apiVersion":"nifi.orange.com/v1alpha1","resourceVersion":"72791563"}, "reason": "ReconcilingCertificate", "message": "Reconciling certificate for nifi user sslnifi-controller.nifi.mgt.cluster.local"}
2022-01-09T09:28:47.973Z	DEBUG	controller-runtime.manager.events	Normal	{"object": {"kind":"NifiUser","namespace":"nifi","name":"sslnifi-controller.nifi.mgt.cluster.local","uid":"7ba70d19-47cb-4452-b128-d3aae4e3aae6","apiVersion":"nifi.orange.com/v1alpha1","resourceVersion":"72791563"}, "reason": "ReconciledCertificate", "message": "Reconciled certificate for nifi user sslnifi-controller.nifi.mgt.cluster.local"}
2022-01-09T09:28:47.974Z	INFO	controllers.NifiUser	Cluster is not ready yet, will wait until it is.
2022-01-09T09:28:47.974Z	DEBUG	controller-runtime.manager.events	Normal	{"object": {"kind":"NifiUser","namespace":"nifi","name":"sslnifi-controller.nifi.mgt.cluster.local","uid":"7ba70d19-47cb-4452-b128-d3aae4e3aae6","apiVersion":"nifi.orange.com/v1alpha1","resourceVersion":"72791563"}, "reason": "ReferenceClusterNotReady", "message": "The referenced cluster is not ready yet : sslnifi in sslnifi"}
2022-01-09T09:28:48.066Z	DEBUG	controller-runtime.manager.events	Normal	{"object": {"kind":"NifiUser","namespace":"nifi","name":"sslnifi-2-node.sslnifi-headless.nifi.svc.cluster.local","uid":"9d463535-6af5-4711-b1a5-3ef7885a60a2","apiVersion":"nifi.orange.com/v1alpha1","resourceVersion":"72791577"}, "reason": "ReconcilingCertificate", "message": "Reconciling certificate for nifi user sslnifi-2-node.sslnifi-headless.nifi.svc.cluster.local"}
2022-01-09T09:28:48.074Z	DEBUG	controller-runtime.manager.events	Normal	{"object": {"kind":"NifiUser","namespace":"nifi","name":"sslnifi-2-node.sslnifi-headless.nifi.svc.cluster.local","uid":"9d463535-6af5-4711-b1a5-3ef7885a60a2","apiVersion":"nifi.orange.com/v1alpha1","resourceVersion":"72791577"}, "reason": "ReconciledCertificate", "message": "Reconciled certificate for nifi user sslnifi-2-node.sslnifi-headless.nifi.svc.cluster.local"}
2022-01-09T09:28:48.075Z	INFO	controllers.NifiUser	Cluster is not ready yet, will wait until it is.
2022-01-09T09:28:48.075Z	DEBUG	controller-runtime.manager.events	Normal	{"object": {"kind":"NifiUser","namespace":"nifi","name":"sslnifi-2-node.sslnifi-headless.nifi.svc.cluster.local","uid":"9d463535-6af5-4711-b1a5-3ef7885a60a2","apiVersion":"nifi.orange.com/v1alpha1","resourceVersion":"72791577"}, "reason": "ReferenceClusterNotReady", "message": "The referenced cluster is not ready yet : sslnifi in sslnifi"}
2022-01-09T09:28:48.086Z	DEBUG	controller-runtime.manager.events	Normal	{"object": {"kind":"NifiUser","namespace":"nifi","name":"sslnifi-3-node.sslnifi-headless.nifi.svc.cluster.local","uid":"0f1c0e35-db34-4920-876d-cf2a93395b06","apiVersion":"nifi.orange.com/v1alpha1","resourceVersion":"72791585"}, "reason": "ReconcilingCertificate", "message": "Reconciling certificate for nifi user sslnifi-3-node.sslnifi-headless.nifi.svc.cluster.local"}
2022-01-09T09:28:48.091Z	INFO	controllers.NifiUser	Cluster is not ready yet, will wait until it is.
2022-01-09T09:28:48.091Z	DEBUG	controller-runtime.manager.events	Normal	{"object": {"kind":"NifiUser","namespace":"nifi","name":"sslnifi-3-node.sslnifi-headless.nifi.svc.cluster.local","uid":"0f1c0e35-db34-4920-876d-cf2a93395b06","apiVersion":"nifi.orange.com/v1alpha1","resourceVersion":"72791585"}, "reason": "ReconciledCertificate", "message": "Reconciled certificate for nifi user sslnifi-3-node.sslnifi-headless.nifi.svc.cluster.local"}
2022-01-09T09:28:48.091Z	DEBUG	controller-runtime.manager.events	Normal	{"object": {"kind":"NifiUser","namespace":"nifi","name":"sslnifi-3-node.sslnifi-headless.nifi.svc.cluster.local","uid":"0f1c0e35-db34-4920-876d-cf2a93395b06","apiVersion":"nifi.orange.com/v1alpha1","resourceVersion":"72791585"}, "reason": "ReferenceClusterNotReady", "message": "The referenced cluster is not ready yet : sslnifi in sslnifi"}
2022-01-09T09:28:58.681Z	DEBUG	controller-runtime.manager.events	Normal	{"object": {"kind":"NifiUser","namespace":"nifi","name":"sslnifi-1-node.sslnifi-headless.nifi.svc.cluster.local","uid":"9164bad5-89d8-4497-946a-6e78df3f8a64","apiVersion":"nifi.orange.com/v1alpha1","resourceVersion":"72791573"}, "reason": "ReconcilingCertificate", "message": "Reconciling certificate for nifi user sslnifi-1-node.sslnifi-headless.nifi.svc.cluster.local"}
2022-01-09T09:28:58.688Z	DEBUG	controller-runtime.manager.events	Normal	{"object": {"kind":"NifiUser","namespace":"nifi","name":"sslnifi-1-node.sslnifi-headless.nifi.svc.cluster.local","uid":"9164bad5-89d8-4497-946a-6e78df3f8a64","apiVersion":"nifi.orange.com/v1alpha1","resourceVersion":"72791573"}, "reason": "ReconciledCertificate", "message": "Reconciled certificate for nifi user sslnifi-1-node.sslnifi-headless.nifi.svc.cluster.local"}
2022-01-09T09:28:58.688Z	INFO	controllers.NifiUser	Cluster is not ready yet, will wait until it is.
2022-01-09T09:28:58.689Z	DEBUG	controller-runtime.manager.events	Normal	{"object": {"kind":"NifiUser","namespace":"nifi","name":"sslnifi-1-node.sslnifi-headless.nifi.svc.cluster.local","uid":"9164bad5-89d8-4497-946a-6e78df3f8a64","apiVersion":"nifi.orange.com/v1alpha1","resourceVersion":"72791573"}, "reason": "ReferenceClusterNotReady", "message": "The referenced cluster is not ready yet : sslnifi in sslnifi"}
2022-01-09T09:29:00.493Z	INFO	controllers.NifiCluster	CR status updated	{"status": "ClusterReconciling"}
2022-01-09T09:29:00.493Z	DEBUG	controllers.NifiCluster	Reconciling	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi"}
2022-01-09T09:29:00.493Z	INFO	controllers.NifiCluster	Reconciling cert-manager PKI	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi"}
2022-01-09T09:29:00.496Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.Service", "name": "sslnifi-headless"}
2022-01-09T09:29:00.496Z	INFO	controllers.NifiCluster	resource updated	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.Service", "name": "sslnifi-headless"}
2022-01-09T09:29:00.496Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.498Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.498Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.500Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.500Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.501Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.501Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.502Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.502Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.503Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.503Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.505Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.527Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.Secret", "name": "sslnifi-config-1"}
2022-01-09T09:29:00.527Z	INFO	controllers.NifiCluster	resource updated	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.Secret", "name": "sslnifi-config-1"}
2022-01-09T09:29:00.527Z	INFO	controllers.NifiCluster	resource updated	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.Secret", "name": "sslnifi-config-1"}
2022-01-09T09:29:00.527Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.Pod"}
2022-01-09T09:29:00.536Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.Pod"}
2022-01-09T09:29:00.537Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.538Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.538Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.539Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.539Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.540Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.540Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.541Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.541Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.542Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.542Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.544Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.549Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.Secret", "name": "sslnifi-config-2"}
2022-01-09T09:29:00.549Z	INFO	controllers.NifiCluster	resource updated	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.Secret", "name": "sslnifi-config-2"}
2022-01-09T09:29:00.549Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	
2022-01-09T09:29:00.587Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.587Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.588Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.588Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.589Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.589Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.591Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.596Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.Secret", "name": "sslnifi-config-3"}
2022-01-09T09:29:00.596Z	INFO	controllers.NifiCluster	resource updated	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.Secret", "name": "sslnifi-config-3"}
2022-01-09T09:29:00.596Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.Pod"}
2022-01-09T09:29:00.618Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.Pod"}
2022-01-09T09:29:00.657Z	ERROR	nifi_client	Unknown user with identity 'CN=sslnifi-controller.nifi.mgt.cluster.local'. Contact the system administrator.	{"error": "Non 200 response from nifi node: 403 Forbidden", "errorVerbose": "Non 200 response from nifi node: 403 Forbidden\ngithub.com/Orange-OpenSource/nifikop/pkg/nificlient.errorGetOperation\n\t/workspace/pkg/nificlient/common.go:38\ngithub.com/Orange-OpenSource/nifikop/pkg/nificlient.(*nifiClient).DescribeCluster\n\t/workspace/pkg/nificlient/system.go:30\ngithub.com/Orange-OpenSource/nifikop/pkg/nificlient.(*nifiClient).Build\n\t/workspace/pkg/nificlient/client.go:181\ngithub.com/Orange-OpenSource/nifikop/pkg/nificlient.NewFromConfig\n\t/workspace/pkg/nificlient/client.go:202\ngithub.com/Orange-OpenSource/nifikop/pkg/common.NewClusterConnection\n\t/workspace/pkg/common/common.go:54\ngithub.com/Orange-OpenSource/nifikop/pkg/clientwrappers/scale.EnsureRemovedNodes\n\t/workspace/pkg/clientwrappers/scale/scale.go:201\ngithub.com/Orange-OpenSource/nifikop/pkg/resources/nifi.(*Reconciler).Reconcile\n\t/workspace/pkg/resources/nifi/nifi.go:237\ngithub.com/Orange-OpenSource/nifikop/controllers.(*NifiClusterReconciler).Reconcile\n\t/workspace/controllers/nificluster_controller.go:131\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.7.2/pkg/internal/controller/controller.go:263\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.7.2/pkg/internal/controller/controller.go:235\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func1.1\n\t/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.7.2/pkg/internal/controller/controller.go:198\nk8s.io/apimachinery/pkg/util/wait.JitterUntilWithContext.func1\n\t/go/pkg/mod/k8s.io/apimachinery@v0.20.2/pkg/util/wait/wait.go:185\nk8s.io/apimachinery/pkg/util/wait.BackoffUntil.func1\n\t/go/pkg/mod/k8s.io/apimachinery@v0.20.2/pkg/util/wait/wait.go:155\nk8s.io/apimachinery/pkg/util/wait.BackoffUntil\n\t/go/pkg/mod/k8s.io/apimachinery@v0.20.2/pkg/util/wait/wait.go:156\nk8s.io/apimachinery/pkg/util/wait.JitterUntil\n\t/go/pkg/mod/k8s.io/apimachinery@v0.20.2/pkg/util/wait/wait.go:133\nk8s.io/apimachinery/pkg/util/wait.JitterUntilWithContext\n\t/go/pkg/mod/k8s.io/apimachinery@v0.20.2/pkg/util/wait/wait.go:185\nk8s.io/apimachinery/pkg/util/wait.UntilWithContext\n\t/go/pkg/mod/k8s.io/apimachinery@v0.20.2/pkg/util/wait/wait.go:99\nruntime.goexit\n\t/usr/local/go/src/runtime/asm_amd64.s:1374"}
github.com/go-logr/zapr.(*zapLogger).Error
	/go/pkg/mod/github.com/go-logr/zapr@v0.2.0/zapr.go:132
github.com/Orange-OpenSource/nifikop/pkg/nificlient.errorGetOperation
	/workspace/pkg/nificlient/common.go:38
github.com/Orange-OpenSource/nifikop/pkg/nificlient.(*nifiClient).DescribeCluster
	/workspace/pkg/nificlient/system.go:30
github.com/Orange-OpenSource/nifikop/pkg/nificlient.(*nifiClient).Build

Below is the cluster status:


Calculated diff between current cluster status and node cluster status as follows:
Node: [NodeConnectionStatus[nodeId=sslnifi-3-node.sslnifi-headless.nifi.svc.cluster.local:8443, state=CONNECTED, updateId=41], NodeConnectionStatus[nodeId=ssl
nifi-1-node.sslnifi-headless.nifi.svc.cluster.local:8443, state=CONNECTED, updateId=40], NodeConnectionStatus[nodeId=sslnifi-2-node.sslnifi-headless.nifi.svc.
cluster.local:8443, state=CONNECTED, updateId=39]]
Self: [NodeConnectionStatus[nodeId=sslnifi-3-node.sslnifi-headless.nifi.svc.cluster.local:8443, state=CONNECTED, updateId=41], NodeConnectionStatus[nodeId=ssl
nifi-1-node.sslnifi-headless.nifi.svc.cluster.local:8443, state=CONNECTED, updateId=40], NodeConnectionStatus[nodeId=sslnifi-2-node.sslnifi-headless.nifi.svc.
cluster.local:8443, state=CONNECTED, updateId=39]]
Difference: []

As you can see in cluster all nodes are connected but if we describe the nificluster status:

status portion of the k describe nificluster -n nifi

Status:
  Nodes State:
    1:
      Configuration State:  ConfigInSync
      Graceful Action State:
        Task Started:     Sun, 9 Jan 2022 07:19:45 GMT
        Action State:     GracefulUpscaleRunning
        Action Step:      CONNECTING
        Error Message:
      Init Cluster Node:  true
      Pod Is Ready:       true
    2:
      Configuration State:  ConfigInSync
      Graceful Action State:
        Action State:     GracefulUpscaleRequired
        Error Message:
      Init Cluster Node:  true
      Pod Is Ready:       true
    3:
      Configuration State:  ConfigInSync
      Graceful Action State:
        Action State:     GracefulUpscaleRequired
        Error Message:
      Init Cluster Node:  true
      Pod Is Ready:       true
  Prometheus Reporting Task:
    Id:
    Version:  0
  Rolling Upgrade Status:
    Error Count:   0
    Last Success:
  State:           ClusterReconciling
Events:            <none>

As per nifikop one node is still in connecting status because of that nifikop says nificluster is not ready yet to take on any actions like creating users groups even we cant perform any upscaling or downscaling.

the #49 issue is almost similar one so i have mentioned issue here, @jrmanes you mentioned that by changing Zkaddress it was working for what changes you have done

I have mentioned My config below, this time i am not creating any aws loadbalancer.
and headless service is by default gets created by nifikop.

---
apiVersion: nifi.orange.com/v1alpha1
kind: NifiCluster
metadata:
  name: sslnifi
spec:
  service:
    headlessEnabled: true
    annotations:
      external-dns.alpha.kubernetes.io/ttl: "5"
  zkAddress: "zookeeper.zookeeper.svc.cluster.local:2181"
  zkPath: "/sslnifinodes"
  clusterImage: "apache/nifi:1.12.1"
  oneNifiNodePerNode: false
  managedAdminUsers:
    -  identity : "CN=admin"  # I have named identity CN bcz the certificate will be styarting with CN so we need to mention it here to.
       name: "admin"
  propagateLabels: true
  nifiClusterTaskSpec:
    retryDurationMinutes: 10
  readOnlyConfig:
    nifiProperties:
      webProxyHosts:
        - sslnifi.mydoamin.com:8443
  nodeConfigGroups:
    default_group:
      isNode: true
      storageConfigs:
        - mountPath: "/opt/nifi/nifi-current/logs"
          name: logs
          pvcSpec:
            accessModes:
              - ReadWriteOnce
            storageClassName: "gp2"
            resources:
              requests:
                storage: 10Gi
        - mountPath: "/opt/nifi/data"
          name: data
          pvcSpec:
            accessModes:
              - ReadWriteOnce
            storageClassName: "gp2"
            resources:
              requests:
                storage: 10Gi
        - mountPath: "/opt/nifi/flowfile_repository"
          name: flowfile-repository
          pvcSpec:
            accessModes:
              - ReadWriteOnce
            storageClassName: "gp2"
            resources:
              requests:
                storage: 10Gi
        - mountPath: "/opt/nifi/nifi-current/conf"
          name: conf
          pvcSpec:
            accessModes:
              - ReadWriteOnce
            storageClassName: "gp2"
            resources:
              requests:
                storage: 10Gi
        - mountPath: "/opt/nifi/content_repository"
          name: content-repository
          pvcSpec:
            accessModes:
              - ReadWriteOnce
            storageClassName: "gp2"
            resources:
              requests:
                storage: 10Gi
        - mountPath: "/opt/nifi/provenance_repository"
          name: provenance-repository
          pvcSpec:
            accessModes:
              - ReadWriteOnce
            storageClassName: "gp2"
            resources:
              requests:
                storage: 10Gi
      serviceAccountName: "default"
      resourcesRequirements:
        limits:
          cpu: "0.5"
          memory: 2Gi
        requests:
          cpu: "0.5"
          memory: 2Gi
  nodes:
    - id: 1
      nodeConfigGroup: "default_group"
    - id: 2
      nodeConfigGroup: "default_group"
    - id: 3
      nodeConfigGroup: "default_group"
  
  listenersConfig:
    internalListeners:
      - type: "https"
        name: "https"
        containerPort: 8443     
      - type: "cluster"
        name: "cluster"
        containerPort: 6007
      - type: "s2s"
        name: "s2s"
        containerPort: 10000
    sslSecrets:
      tlsSecretName: "test-nifikop"
      create: true

the managed users and groups are not getting created as well.
any help would be really appreciated.

Nifikop is saying nificluster is not reachable becase nifi node which is elected to be the cluster cordinator is node1 and nifikop is not able to reach that node thats why nifikop doesnt know about the actual cluster status, as per nifikop node 1 is not ready so its assuming that the cluster is also not ready.

I think there some issue in the nifikop when we run it without OIDC, its not able to reach the cluster cordinator.
if i delete the cluster coordinator then all nodes are going into the connecting state in action state of nifikop.

@tty47
Copy link

tty47 commented Jan 9, 2022

@jrmanes

below is the aws loadbalancer config, I am mapping aws load balancer with headless service (sslnifi-headless) created by nifikop already the sslnifi-headless service is up and running.

---
apiVersion: v1
kind: Service
metadata:
  name: sslnifi-all-headless # HERE
  annotations:
    external-dns.alpha.kubernetes.io/hostname: sslnifi.mydomain.com
    service.beta.kubernetes.io/aws-load-balancer-scheme: internet-facing      
spec:
  selector:
    app: nifi 
    nifi_cr: sslnifi
  ports:
  - name: https
    protocol: TCP
    port: 8443
    targetPort: 8443
  type: LoadBalancer

the problem here is nifikop is not able to verify the cluster state:

This the logs I am getting :

github.com/go-logr/zapr.(*zapLogger).Error
	/go/pkg/mod/github.com/go-logr/zapr@v0.2.0/zapr.go:132
github.com/Orange-OpenSource/nifikop/pkg/nificlient.errorGetOperation
	/workspace/pkg/nificlient/common.go:38
github.com/Orange-OpenSource/nifikop/pkg/nificlient.(*nifiClient).DescribeCluster
	/workspace/pkg/nificlient/system.go:30
github.com/Orange-OpenSource/nifikop/pkg/nificlient.(*nifiClient).Build
	/workspace/pkg/nificlient/client.go:181
github.com/Orange-OpenSource/nifikop/pkg/nificlient.NewFromConfig
	/workspace/pkg/nificlient/client.go:202
github.com/Orange-OpenSource/nifikop/pkg/common.NewClusterConnection
	/workspace/pkg/common/common.go:54
github.com/Orange-OpenSource/nifikop/pkg/clientwrappers/scale.EnsureRemovedNodes
	/workspace/pkg/clientwrappers/scale/scale.go:201
github.com/Orange-OpenSource/nifikop/pkg/resources/nifi.(*Reconciler).Reconcile
	/workspace/pkg/resources/nifi/nifi.go:237
github.com/Orange-OpenSource/nifikop/controllers.(*NifiClusterReconciler).Reconcile
	/workspace/controllers/nificluster_controller.go:131
sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler
	/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.7.2/pkg/internal/controller/controller.go:263
sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem
	/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.7.2/pkg/internal/controller/controller.go:235
sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func1.1
	/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.7.2/pkg/internal/controller/controller.go:198
k8s.io/apimachinery/pkg/util/wait.JitterUntilWithContext.func1
	/go/pkg/mod/k8s.io/apimachinery@v0.20.2/pkg/util/wait/wait.go:185
k8s.io/apimachinery/pkg/util/wait.BackoffUntil.func1
	/go/pkg/mod/k8s.io/apimachinery@v0.20.2/pkg/util/wait/wait.go:155
k8s.io/apimachinery/pkg/util/wait.BackoffUntil
	/go/pkg/mod/k8s.io/apimachinery@v0.20.2/pkg/util/wait/wait.go:156
k8s.io/apimachinery/pkg/util/wait.JitterUntil
	/go/pkg/mod/k8s.io/apimachinery@v0.20.2/pkg/util/wait/wait.go:133
k8s.io/apimachinery/pkg/util/wait.JitterUntilWithContext
	/go/pkg/mod/k8s.io/apimachinery@v0.20.2/pkg/util/wait/wait.go:185
k8s.io/apimachinery/pkg/util/wait.UntilWithContext
	/go/pkg/mod/k8s.io/apimachinery@v0.20.2/pkg/util/wait/wait.go:99
2022-01-09T09:28:45.477Z	INFO	controllers.NifiCluster	Nodes unreachable, may still be starting up
2022-01-09T09:28:47.968Z	DEBUG	controller-runtime.manager.events	Normal	{"object": {"kind":"NifiUser","namespace":"nifi","name":"sslnifi-controller.nifi.mgt.cluster.local","uid":"7ba70d19-47cb-4452-b128-d3aae4e3aae6","apiVersion":"nifi.orange.com/v1alpha1","resourceVersion":"72791563"}, "reason": "ReconcilingCertificate", "message": "Reconciling certificate for nifi user sslnifi-controller.nifi.mgt.cluster.local"}
2022-01-09T09:28:47.973Z	DEBUG	controller-runtime.manager.events	Normal	{"object": {"kind":"NifiUser","namespace":"nifi","name":"sslnifi-controller.nifi.mgt.cluster.local","uid":"7ba70d19-47cb-4452-b128-d3aae4e3aae6","apiVersion":"nifi.orange.com/v1alpha1","resourceVersion":"72791563"}, "reason": "ReconciledCertificate", "message": "Reconciled certificate for nifi user sslnifi-controller.nifi.mgt.cluster.local"}
2022-01-09T09:28:47.974Z	INFO	controllers.NifiUser	Cluster is not ready yet, will wait until it is.
2022-01-09T09:28:45.477Z	INFO	controllers.NifiCluster	Nodes unreachable, may still be starting up
2022-01-09T09:28:47.968Z	DEBUG	controller-runtime.manager.events	Normal	{"object": {"kind":"NifiUser","namespace":"nifi","name":"sslnifi-controller.nifi.mgt.cluster.local","uid":"7ba70d19-47cb-4452-b128-d3aae4e3aae6","apiVersion":"nifi.orange.com/v1alpha1","resourceVersion":"72791563"}, "reason": "ReconcilingCertificate", "message": "Reconciling certificate for nifi user sslnifi-controller.nifi.mgt.cluster.local"}
2022-01-09T09:28:47.973Z	DEBUG	controller-runtime.manager.events	Normal	{"object": {"kind":"NifiUser","namespace":"nifi","name":"sslnifi-controller.nifi.mgt.cluster.local","uid":"7ba70d19-47cb-4452-b128-d3aae4e3aae6","apiVersion":"nifi.orange.com/v1alpha1","resourceVersion":"72791563"}, "reason": "ReconciledCertificate", "message": "Reconciled certificate for nifi user sslnifi-controller.nifi.mgt.cluster.local"}
2022-01-09T09:28:47.974Z	INFO	controllers.NifiUser	Cluster is not ready yet, will wait until it is.
2022-01-09T09:28:47.974Z	DEBUG	controller-runtime.manager.events	Normal	{"object": {"kind":"NifiUser","namespace":"nifi","name":"sslnifi-controller.nifi.mgt.cluster.local","uid":"7ba70d19-47cb-4452-b128-d3aae4e3aae6","apiVersion":"nifi.orange.com/v1alpha1","resourceVersion":"72791563"}, "reason": "ReferenceClusterNotReady", "message": "The referenced cluster is not ready yet : sslnifi in sslnifi"}
2022-01-09T09:28:48.066Z	DEBUG	controller-runtime.manager.events	Normal	{"object": {"kind":"NifiUser","namespace":"nifi","name":"sslnifi-2-node.sslnifi-headless.nifi.svc.cluster.local","uid":"9d463535-6af5-4711-b1a5-3ef7885a60a2","apiVersion":"nifi.orange.com/v1alpha1","resourceVersion":"72791577"}, "reason": "ReconcilingCertificate", "message": "Reconciling certificate for nifi user sslnifi-2-node.sslnifi-headless.nifi.svc.cluster.local"}
2022-01-09T09:28:48.074Z	DEBUG	controller-runtime.manager.events	Normal	{"object": {"kind":"NifiUser","namespace":"nifi","name":"sslnifi-2-node.sslnifi-headless.nifi.svc.cluster.local","uid":"9d463535-6af5-4711-b1a5-3ef7885a60a2","apiVersion":"nifi.orange.com/v1alpha1","resourceVersion":"72791577"}, "reason": "ReconciledCertificate", "message": "Reconciled certificate for nifi user sslnifi-2-node.sslnifi-headless.nifi.svc.cluster.local"}
2022-01-09T09:28:48.075Z	INFO	controllers.NifiUser	Cluster is not ready yet, will wait until it is.
2022-01-09T09:28:48.075Z	DEBUG	controller-runtime.manager.events	Normal	{"object": {"kind":"NifiUser","namespace":"nifi","name":"sslnifi-2-node.sslnifi-headless.nifi.svc.cluster.local","uid":"9d463535-6af5-4711-b1a5-3ef7885a60a2","apiVersion":"nifi.orange.com/v1alpha1","resourceVersion":"72791577"}, "reason": "ReferenceClusterNotReady", "message": "The referenced cluster is not ready yet : sslnifi in sslnifi"}
2022-01-09T09:28:48.086Z	DEBUG	controller-runtime.manager.events	Normal	{"object": {"kind":"NifiUser","namespace":"nifi","name":"sslnifi-3-node.sslnifi-headless.nifi.svc.cluster.local","uid":"0f1c0e35-db34-4920-876d-cf2a93395b06","apiVersion":"nifi.orange.com/v1alpha1","resourceVersion":"72791585"}, "reason": "ReconcilingCertificate", "message": "Reconciling certificate for nifi user sslnifi-3-node.sslnifi-headless.nifi.svc.cluster.local"}
2022-01-09T09:28:48.091Z	INFO	controllers.NifiUser	Cluster is not ready yet, will wait until it is.
2022-01-09T09:28:48.091Z	DEBUG	controller-runtime.manager.events	Normal	{"object": {"kind":"NifiUser","namespace":"nifi","name":"sslnifi-3-node.sslnifi-headless.nifi.svc.cluster.local","uid":"0f1c0e35-db34-4920-876d-cf2a93395b06","apiVersion":"nifi.orange.com/v1alpha1","resourceVersion":"72791585"}, "reason": "ReconciledCertificate", "message": "Reconciled certificate for nifi user sslnifi-3-node.sslnifi-headless.nifi.svc.cluster.local"}
2022-01-09T09:28:48.091Z	DEBUG	controller-runtime.manager.events	Normal	{"object": {"kind":"NifiUser","namespace":"nifi","name":"sslnifi-3-node.sslnifi-headless.nifi.svc.cluster.local","uid":"0f1c0e35-db34-4920-876d-cf2a93395b06","apiVersion":"nifi.orange.com/v1alpha1","resourceVersion":"72791585"}, "reason": "ReferenceClusterNotReady", "message": "The referenced cluster is not ready yet : sslnifi in sslnifi"}
2022-01-09T09:28:58.681Z	DEBUG	controller-runtime.manager.events	Normal	{"object": {"kind":"NifiUser","namespace":"nifi","name":"sslnifi-1-node.sslnifi-headless.nifi.svc.cluster.local","uid":"9164bad5-89d8-4497-946a-6e78df3f8a64","apiVersion":"nifi.orange.com/v1alpha1","resourceVersion":"72791573"}, "reason": "ReconcilingCertificate", "message": "Reconciling certificate for nifi user sslnifi-1-node.sslnifi-headless.nifi.svc.cluster.local"}
2022-01-09T09:28:58.688Z	DEBUG	controller-runtime.manager.events	Normal	{"object": {"kind":"NifiUser","namespace":"nifi","name":"sslnifi-1-node.sslnifi-headless.nifi.svc.cluster.local","uid":"9164bad5-89d8-4497-946a-6e78df3f8a64","apiVersion":"nifi.orange.com/v1alpha1","resourceVersion":"72791573"}, "reason": "ReconciledCertificate", "message": "Reconciled certificate for nifi user sslnifi-1-node.sslnifi-headless.nifi.svc.cluster.local"}
2022-01-09T09:28:58.688Z	INFO	controllers.NifiUser	Cluster is not ready yet, will wait until it is.
2022-01-09T09:28:58.689Z	DEBUG	controller-runtime.manager.events	Normal	{"object": {"kind":"NifiUser","namespace":"nifi","name":"sslnifi-1-node.sslnifi-headless.nifi.svc.cluster.local","uid":"9164bad5-89d8-4497-946a-6e78df3f8a64","apiVersion":"nifi.orange.com/v1alpha1","resourceVersion":"72791573"}, "reason": "ReferenceClusterNotReady", "message": "The referenced cluster is not ready yet : sslnifi in sslnifi"}
2022-01-09T09:29:00.493Z	INFO	controllers.NifiCluster	CR status updated	{"status": "ClusterReconciling"}
2022-01-09T09:29:00.493Z	DEBUG	controllers.NifiCluster	Reconciling	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi"}
2022-01-09T09:29:00.493Z	INFO	controllers.NifiCluster	Reconciling cert-manager PKI	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi"}
2022-01-09T09:29:00.496Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.Service", "name": "sslnifi-headless"}
2022-01-09T09:29:00.496Z	INFO	controllers.NifiCluster	resource updated	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.Service", "name": "sslnifi-headless"}
2022-01-09T09:29:00.496Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.498Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.498Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.500Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.500Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.501Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.501Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.502Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.502Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.503Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.503Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.505Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.527Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.Secret", "name": "sslnifi-config-1"}
2022-01-09T09:29:00.527Z	INFO	controllers.NifiCluster	resource updated	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.Secret", "name": "sslnifi-config-1"}
2022-01-09T09:29:00.527Z	INFO	controllers.NifiCluster	resource updated	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.Secret", "name": "sslnifi-config-1"}
2022-01-09T09:29:00.527Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.Pod"}
2022-01-09T09:29:00.536Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.Pod"}
2022-01-09T09:29:00.537Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.538Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.538Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.539Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.539Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.540Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.540Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.541Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.541Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.542Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.542Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.544Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.549Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.Secret", "name": "sslnifi-config-2"}
2022-01-09T09:29:00.549Z	INFO	controllers.NifiCluster	resource updated	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.Secret", "name": "sslnifi-config-2"}
2022-01-09T09:29:00.549Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	
2022-01-09T09:29:00.587Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.587Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.588Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.588Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.589Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.589Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.591Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.596Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.Secret", "name": "sslnifi-config-3"}
2022-01-09T09:29:00.596Z	INFO	controllers.NifiCluster	resource updated	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.Secret", "name": "sslnifi-config-3"}
2022-01-09T09:29:00.596Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.Pod"}
2022-01-09T09:29:00.618Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.Pod"}
2022-01-09T09:29:00.657Z	ERROR	nifi_client	Unknown user with identity 'CN=sslnifi-controller.nifi.mgt.cluster.local'. Contact the system administrator.	{"error": "Non 200 response from nifi node: 403 Forbidden", "errorVerbose": "Non 200 response from nifi node: 403 Forbidden\ngithub.com/Orange-OpenSource/nifikop/pkg/nificlient.errorGetOperation\n\t/workspace/pkg/nificlient/common.go:38\ngithub.com/Orange-OpenSource/nifikop/pkg/nificlient.(*nifiClient).DescribeCluster\n\t/workspace/pkg/nificlient/system.go:30\ngithub.com/Orange-OpenSource/nifikop/pkg/nificlient.(*nifiClient).Build\n\t/workspace/pkg/nificlient/client.go:181\ngithub.com/Orange-OpenSource/nifikop/pkg/nificlient.NewFromConfig\n\t/workspace/pkg/nificlient/client.go:202\ngithub.com/Orange-OpenSource/nifikop/pkg/common.NewClusterConnection\n\t/workspace/pkg/common/common.go:54\ngithub.com/Orange-OpenSource/nifikop/pkg/clientwrappers/scale.EnsureRemovedNodes\n\t/workspace/pkg/clientwrappers/scale/scale.go:201\ngithub.com/Orange-OpenSource/nifikop/pkg/resources/nifi.(*Reconciler).Reconcile\n\t/workspace/pkg/resources/nifi/nifi.go:237\ngithub.com/Orange-OpenSource/nifikop/controllers.(*NifiClusterReconciler).Reconcile\n\t/workspace/controllers/nificluster_controller.go:131\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.7.2/pkg/internal/controller/controller.go:263\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.7.2/pkg/internal/controller/controller.go:235\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func1.1\n\t/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.7.2/pkg/internal/controller/controller.go:198\nk8s.io/apimachinery/pkg/util/wait.JitterUntilWithContext.func1\n\t/go/pkg/mod/k8s.io/apimachinery@v0.20.2/pkg/util/wait/wait.go:185\nk8s.io/apimachinery/pkg/util/wait.BackoffUntil.func1\n\t/go/pkg/mod/k8s.io/apimachinery@v0.20.2/pkg/util/wait/wait.go:155\nk8s.io/apimachinery/pkg/util/wait.BackoffUntil\n\t/go/pkg/mod/k8s.io/apimachinery@v0.20.2/pkg/util/wait/wait.go:156\nk8s.io/apimachinery/pkg/util/wait.JitterUntil\n\t/go/pkg/mod/k8s.io/apimachinery@v0.20.2/pkg/util/wait/wait.go:133\nk8s.io/apimachinery/pkg/util/wait.JitterUntilWithContext\n\t/go/pkg/mod/k8s.io/apimachinery@v0.20.2/pkg/util/wait/wait.go:185\nk8s.io/apimachinery/pkg/util/wait.UntilWithContext\n\t/go/pkg/mod/k8s.io/apimachinery@v0.20.2/pkg/util/wait/wait.go:99\nruntime.goexit\n\t/usr/local/go/src/runtime/asm_amd64.s:1374"}
github.com/go-logr/zapr.(*zapLogger).Error
	/go/pkg/mod/github.com/go-logr/zapr@v0.2.0/zapr.go:132
github.com/Orange-OpenSource/nifikop/pkg/nificlient.errorGetOperation
	/workspace/pkg/nificlient/common.go:38
github.com/Orange-OpenSource/nifikop/pkg/nificlient.(*nifiClient).DescribeCluster
	/workspace/pkg/nificlient/system.go:30
github.com/Orange-OpenSource/nifikop/pkg/nificlient.(*nifiClient).Build

Below is the cluster status:


Calculated diff between current cluster status and node cluster status as follows:
Node: [NodeConnectionStatus[nodeId=sslnifi-3-node.sslnifi-headless.nifi.svc.cluster.local:8443, state=CONNECTED, updateId=41], NodeConnectionStatus[nodeId=ssl
nifi-1-node.sslnifi-headless.nifi.svc.cluster.local:8443, state=CONNECTED, updateId=40], NodeConnectionStatus[nodeId=sslnifi-2-node.sslnifi-headless.nifi.svc.
cluster.local:8443, state=CONNECTED, updateId=39]]
Self: [NodeConnectionStatus[nodeId=sslnifi-3-node.sslnifi-headless.nifi.svc.cluster.local:8443, state=CONNECTED, updateId=41], NodeConnectionStatus[nodeId=ssl
nifi-1-node.sslnifi-headless.nifi.svc.cluster.local:8443, state=CONNECTED, updateId=40], NodeConnectionStatus[nodeId=sslnifi-2-node.sslnifi-headless.nifi.svc.
cluster.local:8443, state=CONNECTED, updateId=39]]
Difference: []

As you can see in cluster all nodes are connected but if we describe the nificluster status:

status portion of the k describe nificluster -n nifi

Status:
  Nodes State:
    1:
      Configuration State:  ConfigInSync
      Graceful Action State:
        Task Started:     Sun, 9 Jan 2022 07:19:45 GMT
        Action State:     GracefulUpscaleRunning
        Action Step:      CONNECTING
        Error Message:
      Init Cluster Node:  true
      Pod Is Ready:       true
    2:
      Configuration State:  ConfigInSync
      Graceful Action State:
        Action State:     GracefulUpscaleRequired
        Error Message:
      Init Cluster Node:  true
      Pod Is Ready:       true
    3:
      Configuration State:  ConfigInSync
      Graceful Action State:
        Action State:     GracefulUpscaleRequired
        Error Message:
      Init Cluster Node:  true
      Pod Is Ready:       true
  Prometheus Reporting Task:
    Id:
    Version:  0
  Rolling Upgrade Status:
    Error Count:   0
    Last Success:
  State:           ClusterReconciling
Events:            <none>

As per nifikop one node is still in connecting status because of that nifikop says nificluster is not ready yet to take on any actions like creating users groups even we cant perform any upscaling or downscaling.

the #49 issue is almost similar one so i have mentioned issue here, @jrmanes you mentioned that by changing Zkaddress it was working for what changes you have done

I have mentioned My config below, this time i am not creating any aws loadbalancer. and headless service is by default gets created by nifikop.

---
apiVersion: nifi.orange.com/v1alpha1
kind: NifiCluster
metadata:
  name: sslnifi
spec:
  service:
    headlessEnabled: true
    annotations:
      external-dns.alpha.kubernetes.io/ttl: "5"
  zkAddress: "zookeeper.zookeeper.svc.cluster.local:2181"
  zkPath: "/sslnifinodes"
  clusterImage: "apache/nifi:1.12.1"
  oneNifiNodePerNode: false
  managedAdminUsers:
    -  identity : "CN=admin"  # I have named identity CN bcz the certificate will be styarting with CN so we need to mention it here to.
       name: "admin"
  propagateLabels: true
  nifiClusterTaskSpec:
    retryDurationMinutes: 10
  readOnlyConfig:
    nifiProperties:
      webProxyHosts:
        - sslnifi.mydoamin.com:8443
  nodeConfigGroups:
    default_group:
      isNode: true
      storageConfigs:
        - mountPath: "/opt/nifi/nifi-current/logs"
          name: logs
          pvcSpec:
            accessModes:
              - ReadWriteOnce
            storageClassName: "gp2"
            resources:
              requests:
                storage: 10Gi
        - mountPath: "/opt/nifi/data"
          name: data
          pvcSpec:
            accessModes:
              - ReadWriteOnce
            storageClassName: "gp2"
            resources:
              requests:
                storage: 10Gi
        - mountPath: "/opt/nifi/flowfile_repository"
          name: flowfile-repository
          pvcSpec:
            accessModes:
              - ReadWriteOnce
            storageClassName: "gp2"
            resources:
              requests:
                storage: 10Gi
        - mountPath: "/opt/nifi/nifi-current/conf"
          name: conf
          pvcSpec:
            accessModes:
              - ReadWriteOnce
            storageClassName: "gp2"
            resources:
              requests:
                storage: 10Gi
        - mountPath: "/opt/nifi/content_repository"
          name: content-repository
          pvcSpec:
            accessModes:
              - ReadWriteOnce
            storageClassName: "gp2"
            resources:
              requests:
                storage: 10Gi
        - mountPath: "/opt/nifi/provenance_repository"
          name: provenance-repository
          pvcSpec:
            accessModes:
              - ReadWriteOnce
            storageClassName: "gp2"
            resources:
              requests:
                storage: 10Gi
      serviceAccountName: "default"
      resourcesRequirements:
        limits:
          cpu: "0.5"
          memory: 2Gi
        requests:
          cpu: "0.5"
          memory: 2Gi
  nodes:
    - id: 1
      nodeConfigGroup: "default_group"
    - id: 2
      nodeConfigGroup: "default_group"
    - id: 3
      nodeConfigGroup: "default_group"
  
  listenersConfig:
    internalListeners:
      - type: "https"
        name: "https"
        containerPort: 8443     
      - type: "cluster"
        name: "cluster"
        containerPort: 6007
      - type: "s2s"
        name: "s2s"
        containerPort: 10000
    sslSecrets:
      tlsSecretName: "test-nifikop"
      create: true

the managed users and groups are not getting created as well. any help would be really appreciated.

Nifikop is saying nificluster is not reachable becase nifi node which is elected to be the cluster cordinator is node1 and nifikop is not able to reach that node thats why nifikop doesnt know about the actual cluster status, as per nifikop node 1 is not ready so its assuming that the cluster is also not ready.

I think there some issue in the nifikop when we run it without OIDC, its not able to reach the cluster cordinator. if i delete the cluster coordinator then all nodes are going into the connecting state in action state of nifikop.

Hello @Sreenivas-Ratakonda

Regarding the issue, I'll recommend you to do some checks before in order to validate the issue:

  • Check the status of zookeeper, check the logs of the pods and see if they are connected properly, you can see the leader and the workers (I had an issue setting up the zk cluster in Azure)
  • 7218
  • 7125

Once you have verify that the zk cluster is running properly, I'd recommend you to verify that you can resolve the dns reference from the pods.

I'll check the code from my side to check if I got the same issue.

@erdrix is this issue familiar to you?

@Sreenivas-Ratakonda
Copy link

Sreenivas-Ratakonda commented Jan 10, 2022

@jrmanes
below is the aws loadbalancer config, I am mapping aws load balancer with headless service (sslnifi-headless) created by nifikop already the sslnifi-headless service is up and running.

---
apiVersion: v1
kind: Service
metadata:
  name: sslnifi-all-headless # HERE
  annotations:
    external-dns.alpha.kubernetes.io/hostname: sslnifi.mydomain.com
    service.beta.kubernetes.io/aws-load-balancer-scheme: internet-facing      
spec:
  selector:
    app: nifi 
    nifi_cr: sslnifi
  ports:
  - name: https
    protocol: TCP
    port: 8443
    targetPort: 8443
  type: LoadBalancer

the problem here is nifikop is not able to verify the cluster state:
This the logs I am getting :

github.com/go-logr/zapr.(*zapLogger).Error
	/go/pkg/mod/github.com/go-logr/zapr@v0.2.0/zapr.go:132
github.com/Orange-OpenSource/nifikop/pkg/nificlient.errorGetOperation
	/workspace/pkg/nificlient/common.go:38
github.com/Orange-OpenSource/nifikop/pkg/nificlient.(*nifiClient).DescribeCluster
	/workspace/pkg/nificlient/system.go:30
github.com/Orange-OpenSource/nifikop/pkg/nificlient.(*nifiClient).Build
	/workspace/pkg/nificlient/client.go:181
github.com/Orange-OpenSource/nifikop/pkg/nificlient.NewFromConfig
	/workspace/pkg/nificlient/client.go:202
github.com/Orange-OpenSource/nifikop/pkg/common.NewClusterConnection
	/workspace/pkg/common/common.go:54
github.com/Orange-OpenSource/nifikop/pkg/clientwrappers/scale.EnsureRemovedNodes
	/workspace/pkg/clientwrappers/scale/scale.go:201
github.com/Orange-OpenSource/nifikop/pkg/resources/nifi.(*Reconciler).Reconcile
	/workspace/pkg/resources/nifi/nifi.go:237
github.com/Orange-OpenSource/nifikop/controllers.(*NifiClusterReconciler).Reconcile
	/workspace/controllers/nificluster_controller.go:131
sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler
	/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.7.2/pkg/internal/controller/controller.go:263
sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem
	/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.7.2/pkg/internal/controller/controller.go:235
sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func1.1
	/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.7.2/pkg/internal/controller/controller.go:198
k8s.io/apimachinery/pkg/util/wait.JitterUntilWithContext.func1
	/go/pkg/mod/k8s.io/apimachinery@v0.20.2/pkg/util/wait/wait.go:185
k8s.io/apimachinery/pkg/util/wait.BackoffUntil.func1
	/go/pkg/mod/k8s.io/apimachinery@v0.20.2/pkg/util/wait/wait.go:155
k8s.io/apimachinery/pkg/util/wait.BackoffUntil
	/go/pkg/mod/k8s.io/apimachinery@v0.20.2/pkg/util/wait/wait.go:156
k8s.io/apimachinery/pkg/util/wait.JitterUntil
	/go/pkg/mod/k8s.io/apimachinery@v0.20.2/pkg/util/wait/wait.go:133
k8s.io/apimachinery/pkg/util/wait.JitterUntilWithContext
	/go/pkg/mod/k8s.io/apimachinery@v0.20.2/pkg/util/wait/wait.go:185
k8s.io/apimachinery/pkg/util/wait.UntilWithContext
	/go/pkg/mod/k8s.io/apimachinery@v0.20.2/pkg/util/wait/wait.go:99
2022-01-09T09:28:45.477Z	INFO	controllers.NifiCluster	Nodes unreachable, may still be starting up
2022-01-09T09:28:47.968Z	DEBUG	controller-runtime.manager.events	Normal	{"object": {"kind":"NifiUser","namespace":"nifi","name":"sslnifi-controller.nifi.mgt.cluster.local","uid":"7ba70d19-47cb-4452-b128-d3aae4e3aae6","apiVersion":"nifi.orange.com/v1alpha1","resourceVersion":"72791563"}, "reason": "ReconcilingCertificate", "message": "Reconciling certificate for nifi user sslnifi-controller.nifi.mgt.cluster.local"}
2022-01-09T09:28:47.973Z	DEBUG	controller-runtime.manager.events	Normal	{"object": {"kind":"NifiUser","namespace":"nifi","name":"sslnifi-controller.nifi.mgt.cluster.local","uid":"7ba70d19-47cb-4452-b128-d3aae4e3aae6","apiVersion":"nifi.orange.com/v1alpha1","resourceVersion":"72791563"}, "reason": "ReconciledCertificate", "message": "Reconciled certificate for nifi user sslnifi-controller.nifi.mgt.cluster.local"}
2022-01-09T09:28:47.974Z	INFO	controllers.NifiUser	Cluster is not ready yet, will wait until it is.
2022-01-09T09:28:45.477Z	INFO	controllers.NifiCluster	Nodes unreachable, may still be starting up
2022-01-09T09:28:47.968Z	DEBUG	controller-runtime.manager.events	Normal	{"object": {"kind":"NifiUser","namespace":"nifi","name":"sslnifi-controller.nifi.mgt.cluster.local","uid":"7ba70d19-47cb-4452-b128-d3aae4e3aae6","apiVersion":"nifi.orange.com/v1alpha1","resourceVersion":"72791563"}, "reason": "ReconcilingCertificate", "message": "Reconciling certificate for nifi user sslnifi-controller.nifi.mgt.cluster.local"}
2022-01-09T09:28:47.973Z	DEBUG	controller-runtime.manager.events	Normal	{"object": {"kind":"NifiUser","namespace":"nifi","name":"sslnifi-controller.nifi.mgt.cluster.local","uid":"7ba70d19-47cb-4452-b128-d3aae4e3aae6","apiVersion":"nifi.orange.com/v1alpha1","resourceVersion":"72791563"}, "reason": "ReconciledCertificate", "message": "Reconciled certificate for nifi user sslnifi-controller.nifi.mgt.cluster.local"}
2022-01-09T09:28:47.974Z	INFO	controllers.NifiUser	Cluster is not ready yet, will wait until it is.
2022-01-09T09:28:47.974Z	DEBUG	controller-runtime.manager.events	Normal	{"object": {"kind":"NifiUser","namespace":"nifi","name":"sslnifi-controller.nifi.mgt.cluster.local","uid":"7ba70d19-47cb-4452-b128-d3aae4e3aae6","apiVersion":"nifi.orange.com/v1alpha1","resourceVersion":"72791563"}, "reason": "ReferenceClusterNotReady", "message": "The referenced cluster is not ready yet : sslnifi in sslnifi"}
2022-01-09T09:28:48.066Z	DEBUG	controller-runtime.manager.events	Normal	{"object": {"kind":"NifiUser","namespace":"nifi","name":"sslnifi-2-node.sslnifi-headless.nifi.svc.cluster.local","uid":"9d463535-6af5-4711-b1a5-3ef7885a60a2","apiVersion":"nifi.orange.com/v1alpha1","resourceVersion":"72791577"}, "reason": "ReconcilingCertificate", "message": "Reconciling certificate for nifi user sslnifi-2-node.sslnifi-headless.nifi.svc.cluster.local"}
2022-01-09T09:28:48.074Z	DEBUG	controller-runtime.manager.events	Normal	{"object": {"kind":"NifiUser","namespace":"nifi","name":"sslnifi-2-node.sslnifi-headless.nifi.svc.cluster.local","uid":"9d463535-6af5-4711-b1a5-3ef7885a60a2","apiVersion":"nifi.orange.com/v1alpha1","resourceVersion":"72791577"}, "reason": "ReconciledCertificate", "message": "Reconciled certificate for nifi user sslnifi-2-node.sslnifi-headless.nifi.svc.cluster.local"}
2022-01-09T09:28:48.075Z	INFO	controllers.NifiUser	Cluster is not ready yet, will wait until it is.
2022-01-09T09:28:48.075Z	DEBUG	controller-runtime.manager.events	Normal	{"object": {"kind":"NifiUser","namespace":"nifi","name":"sslnifi-2-node.sslnifi-headless.nifi.svc.cluster.local","uid":"9d463535-6af5-4711-b1a5-3ef7885a60a2","apiVersion":"nifi.orange.com/v1alpha1","resourceVersion":"72791577"}, "reason": "ReferenceClusterNotReady", "message": "The referenced cluster is not ready yet : sslnifi in sslnifi"}
2022-01-09T09:28:48.086Z	DEBUG	controller-runtime.manager.events	Normal	{"object": {"kind":"NifiUser","namespace":"nifi","name":"sslnifi-3-node.sslnifi-headless.nifi.svc.cluster.local","uid":"0f1c0e35-db34-4920-876d-cf2a93395b06","apiVersion":"nifi.orange.com/v1alpha1","resourceVersion":"72791585"}, "reason": "ReconcilingCertificate", "message": "Reconciling certificate for nifi user sslnifi-3-node.sslnifi-headless.nifi.svc.cluster.local"}
2022-01-09T09:28:48.091Z	INFO	controllers.NifiUser	Cluster is not ready yet, will wait until it is.
2022-01-09T09:28:48.091Z	DEBUG	controller-runtime.manager.events	Normal	{"object": {"kind":"NifiUser","namespace":"nifi","name":"sslnifi-3-node.sslnifi-headless.nifi.svc.cluster.local","uid":"0f1c0e35-db34-4920-876d-cf2a93395b06","apiVersion":"nifi.orange.com/v1alpha1","resourceVersion":"72791585"}, "reason": "ReconciledCertificate", "message": "Reconciled certificate for nifi user sslnifi-3-node.sslnifi-headless.nifi.svc.cluster.local"}
2022-01-09T09:28:48.091Z	DEBUG	controller-runtime.manager.events	Normal	{"object": {"kind":"NifiUser","namespace":"nifi","name":"sslnifi-3-node.sslnifi-headless.nifi.svc.cluster.local","uid":"0f1c0e35-db34-4920-876d-cf2a93395b06","apiVersion":"nifi.orange.com/v1alpha1","resourceVersion":"72791585"}, "reason": "ReferenceClusterNotReady", "message": "The referenced cluster is not ready yet : sslnifi in sslnifi"}
2022-01-09T09:28:58.681Z	DEBUG	controller-runtime.manager.events	Normal	{"object": {"kind":"NifiUser","namespace":"nifi","name":"sslnifi-1-node.sslnifi-headless.nifi.svc.cluster.local","uid":"9164bad5-89d8-4497-946a-6e78df3f8a64","apiVersion":"nifi.orange.com/v1alpha1","resourceVersion":"72791573"}, "reason": "ReconcilingCertificate", "message": "Reconciling certificate for nifi user sslnifi-1-node.sslnifi-headless.nifi.svc.cluster.local"}
2022-01-09T09:28:58.688Z	DEBUG	controller-runtime.manager.events	Normal	{"object": {"kind":"NifiUser","namespace":"nifi","name":"sslnifi-1-node.sslnifi-headless.nifi.svc.cluster.local","uid":"9164bad5-89d8-4497-946a-6e78df3f8a64","apiVersion":"nifi.orange.com/v1alpha1","resourceVersion":"72791573"}, "reason": "ReconciledCertificate", "message": "Reconciled certificate for nifi user sslnifi-1-node.sslnifi-headless.nifi.svc.cluster.local"}
2022-01-09T09:28:58.688Z	INFO	controllers.NifiUser	Cluster is not ready yet, will wait until it is.
2022-01-09T09:28:58.689Z	DEBUG	controller-runtime.manager.events	Normal	{"object": {"kind":"NifiUser","namespace":"nifi","name":"sslnifi-1-node.sslnifi-headless.nifi.svc.cluster.local","uid":"9164bad5-89d8-4497-946a-6e78df3f8a64","apiVersion":"nifi.orange.com/v1alpha1","resourceVersion":"72791573"}, "reason": "ReferenceClusterNotReady", "message": "The referenced cluster is not ready yet : sslnifi in sslnifi"}
2022-01-09T09:29:00.493Z	INFO	controllers.NifiCluster	CR status updated	{"status": "ClusterReconciling"}
2022-01-09T09:29:00.493Z	DEBUG	controllers.NifiCluster	Reconciling	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi"}
2022-01-09T09:29:00.493Z	INFO	controllers.NifiCluster	Reconciling cert-manager PKI	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi"}
2022-01-09T09:29:00.496Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.Service", "name": "sslnifi-headless"}
2022-01-09T09:29:00.496Z	INFO	controllers.NifiCluster	resource updated	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.Service", "name": "sslnifi-headless"}
2022-01-09T09:29:00.496Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.498Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.498Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.500Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.500Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.501Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.501Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.502Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.502Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.503Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.503Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.505Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.527Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.Secret", "name": "sslnifi-config-1"}
2022-01-09T09:29:00.527Z	INFO	controllers.NifiCluster	resource updated	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.Secret", "name": "sslnifi-config-1"}
2022-01-09T09:29:00.527Z	INFO	controllers.NifiCluster	resource updated	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.Secret", "name": "sslnifi-config-1"}
2022-01-09T09:29:00.527Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.Pod"}
2022-01-09T09:29:00.536Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.Pod"}
2022-01-09T09:29:00.537Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.538Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.538Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.539Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.539Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.540Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.540Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.541Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.541Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.542Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.542Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.544Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.549Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.Secret", "name": "sslnifi-config-2"}
2022-01-09T09:29:00.549Z	INFO	controllers.NifiCluster	resource updated	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.Secret", "name": "sslnifi-config-2"}
2022-01-09T09:29:00.549Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	
2022-01-09T09:29:00.587Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.587Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.588Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.588Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.589Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.589Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.591Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-09T09:29:00.596Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.Secret", "name": "sslnifi-config-3"}
2022-01-09T09:29:00.596Z	INFO	controllers.NifiCluster	resource updated	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.Secret", "name": "sslnifi-config-3"}
2022-01-09T09:29:00.596Z	DEBUG	controllers.NifiCluster	searching with label because name is empty	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.Pod"}
2022-01-09T09:29:00.618Z	DEBUG	controllers.NifiCluster	resource is in sync	{"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.Pod"}
2022-01-09T09:29:00.657Z	ERROR	nifi_client	Unknown user with identity 'CN=sslnifi-controller.nifi.mgt.cluster.local'. Contact the system administrator.	{"error": "Non 200 response from nifi node: 403 Forbidden", "errorVerbose": "Non 200 response from nifi node: 403 Forbidden\ngithub.com/Orange-OpenSource/nifikop/pkg/nificlient.errorGetOperation\n\t/workspace/pkg/nificlient/common.go:38\ngithub.com/Orange-OpenSource/nifikop/pkg/nificlient.(*nifiClient).DescribeCluster\n\t/workspace/pkg/nificlient/system.go:30\ngithub.com/Orange-OpenSource/nifikop/pkg/nificlient.(*nifiClient).Build\n\t/workspace/pkg/nificlient/client.go:181\ngithub.com/Orange-OpenSource/nifikop/pkg/nificlient.NewFromConfig\n\t/workspace/pkg/nificlient/client.go:202\ngithub.com/Orange-OpenSource/nifikop/pkg/common.NewClusterConnection\n\t/workspace/pkg/common/common.go:54\ngithub.com/Orange-OpenSource/nifikop/pkg/clientwrappers/scale.EnsureRemovedNodes\n\t/workspace/pkg/clientwrappers/scale/scale.go:201\ngithub.com/Orange-OpenSource/nifikop/pkg/resources/nifi.(*Reconciler).Reconcile\n\t/workspace/pkg/resources/nifi/nifi.go:237\ngithub.com/Orange-OpenSource/nifikop/controllers.(*NifiClusterReconciler).Reconcile\n\t/workspace/controllers/nificluster_controller.go:131\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.7.2/pkg/internal/controller/controller.go:263\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.7.2/pkg/internal/controller/controller.go:235\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func1.1\n\t/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.7.2/pkg/internal/controller/controller.go:198\nk8s.io/apimachinery/pkg/util/wait.JitterUntilWithContext.func1\n\t/go/pkg/mod/k8s.io/apimachinery@v0.20.2/pkg/util/wait/wait.go:185\nk8s.io/apimachinery/pkg/util/wait.BackoffUntil.func1\n\t/go/pkg/mod/k8s.io/apimachinery@v0.20.2/pkg/util/wait/wait.go:155\nk8s.io/apimachinery/pkg/util/wait.BackoffUntil\n\t/go/pkg/mod/k8s.io/apimachinery@v0.20.2/pkg/util/wait/wait.go:156\nk8s.io/apimachinery/pkg/util/wait.JitterUntil\n\t/go/pkg/mod/k8s.io/apimachinery@v0.20.2/pkg/util/wait/wait.go:133\nk8s.io/apimachinery/pkg/util/wait.JitterUntilWithContext\n\t/go/pkg/mod/k8s.io/apimachinery@v0.20.2/pkg/util/wait/wait.go:185\nk8s.io/apimachinery/pkg/util/wait.UntilWithContext\n\t/go/pkg/mod/k8s.io/apimachinery@v0.20.2/pkg/util/wait/wait.go:99\nruntime.goexit\n\t/usr/local/go/src/runtime/asm_amd64.s:1374"}
github.com/go-logr/zapr.(*zapLogger).Error
	/go/pkg/mod/github.com/go-logr/zapr@v0.2.0/zapr.go:132
github.com/Orange-OpenSource/nifikop/pkg/nificlient.errorGetOperation
	/workspace/pkg/nificlient/common.go:38
github.com/Orange-OpenSource/nifikop/pkg/nificlient.(*nifiClient).DescribeCluster
	/workspace/pkg/nificlient/system.go:30
github.com/Orange-OpenSource/nifikop/pkg/nificlient.(*nifiClient).Build

Below is the cluster status:


Calculated diff between current cluster status and node cluster status as follows:
Node: [NodeConnectionStatus[nodeId=sslnifi-3-node.sslnifi-headless.nifi.svc.cluster.local:8443, state=CONNECTED, updateId=41], NodeConnectionStatus[nodeId=ssl
nifi-1-node.sslnifi-headless.nifi.svc.cluster.local:8443, state=CONNECTED, updateId=40], NodeConnectionStatus[nodeId=sslnifi-2-node.sslnifi-headless.nifi.svc.
cluster.local:8443, state=CONNECTED, updateId=39]]
Self: [NodeConnectionStatus[nodeId=sslnifi-3-node.sslnifi-headless.nifi.svc.cluster.local:8443, state=CONNECTED, updateId=41], NodeConnectionStatus[nodeId=ssl
nifi-1-node.sslnifi-headless.nifi.svc.cluster.local:8443, state=CONNECTED, updateId=40], NodeConnectionStatus[nodeId=sslnifi-2-node.sslnifi-headless.nifi.svc.
cluster.local:8443, state=CONNECTED, updateId=39]]
Difference: []

As you can see in cluster all nodes are connected but if we describe the nificluster status:
status portion of the k describe nificluster -n nifi

Status:
  Nodes State:
    1:
      Configuration State:  ConfigInSync
      Graceful Action State:
        Task Started:     Sun, 9 Jan 2022 07:19:45 GMT
        Action State:     GracefulUpscaleRunning
        Action Step:      CONNECTING
        Error Message:
      Init Cluster Node:  true
      Pod Is Ready:       true
    2:
      Configuration State:  ConfigInSync
      Graceful Action State:
        Action State:     GracefulUpscaleRequired
        Error Message:
      Init Cluster Node:  true
      Pod Is Ready:       true
    3:
      Configuration State:  ConfigInSync
      Graceful Action State:
        Action State:     GracefulUpscaleRequired
        Error Message:
      Init Cluster Node:  true
      Pod Is Ready:       true
  Prometheus Reporting Task:
    Id:
    Version:  0
  Rolling Upgrade Status:
    Error Count:   0
    Last Success:
  State:           ClusterReconciling
Events:            <none>

As per nifikop one node is still in connecting status because of that nifikop says nificluster is not ready yet to take on any actions like creating users groups even we cant perform any upscaling or downscaling.
the #49 issue is almost similar one so i have mentioned issue here, @jrmanes you mentioned that by changing Zkaddress it was working for what changes you have done
I have mentioned My config below, this time i am not creating any aws loadbalancer. and headless service is by default gets created by nifikop.

---
apiVersion: nifi.orange.com/v1alpha1
kind: NifiCluster
metadata:
  name: sslnifi
spec:
  service:
    headlessEnabled: true
    annotations:
      external-dns.alpha.kubernetes.io/ttl: "5"
  zkAddress: "zookeeper.zookeeper.svc.cluster.local:2181"
  zkPath: "/sslnifinodes"
  clusterImage: "apache/nifi:1.12.1"
  oneNifiNodePerNode: false
  managedAdminUsers:
    -  identity : "CN=admin"  # I have named identity CN bcz the certificate will be styarting with CN so we need to mention it here to.
       name: "admin"
  propagateLabels: true
  nifiClusterTaskSpec:
    retryDurationMinutes: 10
  readOnlyConfig:
    nifiProperties:
      webProxyHosts:
        - sslnifi.mydoamin.com:8443
  nodeConfigGroups:
    default_group:
      isNode: true
      storageConfigs:
        - mountPath: "/opt/nifi/nifi-current/logs"
          name: logs
          pvcSpec:
            accessModes:
              - ReadWriteOnce
            storageClassName: "gp2"
            resources:
              requests:
                storage: 10Gi
        - mountPath: "/opt/nifi/data"
          name: data
          pvcSpec:
            accessModes:
              - ReadWriteOnce
            storageClassName: "gp2"
            resources:
              requests:
                storage: 10Gi
        - mountPath: "/opt/nifi/flowfile_repository"
          name: flowfile-repository
          pvcSpec:
            accessModes:
              - ReadWriteOnce
            storageClassName: "gp2"
            resources:
              requests:
                storage: 10Gi
        - mountPath: "/opt/nifi/nifi-current/conf"
          name: conf
          pvcSpec:
            accessModes:
              - ReadWriteOnce
            storageClassName: "gp2"
            resources:
              requests:
                storage: 10Gi
        - mountPath: "/opt/nifi/content_repository"
          name: content-repository
          pvcSpec:
            accessModes:
              - ReadWriteOnce
            storageClassName: "gp2"
            resources:
              requests:
                storage: 10Gi
        - mountPath: "/opt/nifi/provenance_repository"
          name: provenance-repository
          pvcSpec:
            accessModes:
              - ReadWriteOnce
            storageClassName: "gp2"
            resources:
              requests:
                storage: 10Gi
      serviceAccountName: "default"
      resourcesRequirements:
        limits:
          cpu: "0.5"
          memory: 2Gi
        requests:
          cpu: "0.5"
          memory: 2Gi
  nodes:
    - id: 1
      nodeConfigGroup: "default_group"
    - id: 2
      nodeConfigGroup: "default_group"
    - id: 3
      nodeConfigGroup: "default_group"
  
  listenersConfig:
    internalListeners:
      - type: "https"
        name: "https"
        containerPort: 8443     
      - type: "cluster"
        name: "cluster"
        containerPort: 6007
      - type: "s2s"
        name: "s2s"
        containerPort: 10000
    sslSecrets:
      tlsSecretName: "test-nifikop"
      create: true

the managed users and groups are not getting created as well. any help would be really appreciated.
Nifikop is saying nificluster is not reachable becase nifi node which is elected to be the cluster cordinator is node1 and nifikop is not able to reach that node thats why nifikop doesnt know about the actual cluster status, as per nifikop node 1 is not ready so its assuming that the cluster is also not ready.
I think there some issue in the nifikop when we run it without OIDC, its not able to reach the cluster cordinator. if i delete the cluster coordinator then all nodes are going into the connecting state in action state of nifikop.

Hello @Sreenivas-Ratakonda

Regarding the issue, I'll recommend you to do some checks before in order to validate the issue:

  • Check the status of zookeeper, check the logs of the pods and see if they are connected properly, you can see the leader and the workers (I had an issue setting up the zk cluster in Azure)
  • 7218
  • 7125

Once you have verify that the zk cluster is running properly, I'd recommend you to verify that you can resolve the dns reference from the pods.

I'll check the code from my side to check if I got the same issue.

@erdrix is this issue familiar to you?

@jrmanes

I have checked the zookeeper status, zookeeper cluster is working fine weather the network policy true or false the cluster is working fine for me i am doing this poc in aws.
zookeeper status:

$ for i in {0..2}; do echo "ZK: zookeeper-$i" && k exec zookeeper-$i -n zookeeper -- zkServer.sh status;done
ZK: zookeeper-0
/opt/bitnami/java/bin/java
ZooKeeper JMX enabled by default
Using config: /opt/bitnami/zookeeper/bin/../conf/zoo.cfg
Client port found: 2181. Client address: localhost. Client SSL: false.
Mode: follower
ZK: zookeeper-1
/opt/bitnami/java/bin/java
ZooKeeper JMX enabled by default
Using config: /opt/bitnami/zookeeper/bin/../conf/zoo.cfg
Client port found: 2181. Client address: localhost. Client SSL: false.
Mode: follower
ZK: zookeeper-2
/opt/bitnami/java/bin/java
ZooKeeper JMX enabled by default
Using config: /opt/bitnami/zookeeper/bin/../conf/zoo.cfg
Client port found: 2181. Client address: localhost. Client SSL: false.
Mode: leader


I have tried with nifikop version 0.7.0 and 0.7.5 in both version the result is same if I exclude the OIDC the nifikop is getting disengaged from the cluster and it says the cluster is not ready.

When I checked the nifikop logs below mentioned error is keep on coming up:

2022-01-10T10:18:24.435Z        DEBUG   controllers.NifiCluster resource is in sync     {"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.PersistentVolumeClaim"}
2022-01-10T10:18:24.439Z        DEBUG   controllers.NifiCluster resource is in sync     {"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.Secret", "name": "sslnifi-config-3"}
2022-01-10T10:18:24.439Z        INFO    controllers.NifiCluster resource updated        {"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.Secret", "name": "sslnifi-config-3"}
2022-01-10T10:18:24.439Z        DEBUG   controllers.NifiCluster searching with label because name is empty      {"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.Pod"}
2022-01-10T10:18:24.532Z        DEBUG   controllers.NifiCluster resource is in sync     {"component": "nifi", "clusterName": "sslnifi", "clusterNamespace": "nifi", "kind": "*v1.Pod"}
2022-01-10T10:18:24.563Z        ERROR   nifi_client     Unknown user with identity 'CN=sslnifi-controller.nifi.mgt.cluster.local'. Contact the system administrator.    {"error": "Non 200 response from nifi node: 403 Forbidden", "errorVerbose": "Non 200 response from nifi node: 403 Forbidden\ngithub.com/Orange-OpenSource/nifikop/pkg/nificlient.errorGetOperation\n\t/workspace/pkg/nificlient/common.go:38\ngithub.com/Orange-OpenSource/nifikop/pkg/nificlient.(*nifiClient).DescribeCluster\n\t/workspace/pkg/nificlient/system.go:30\ngithub.com/Orange-OpenSource/nifikop/pkg/nificlient.(*nifiClient).Build\n\t/workspace/pkg/nificlient/client.go:181\ngithub.com/Orange-OpenSource/nifikop/pkg/nificlient.NewFromConfig\n\t/workspace/pkg/nificlient/client.go:202\ngithub.com/Orange-OpenSource/nifikop/pkg/common.NewClusterConnection\n\t/workspace/pkg/common/common.go:55\ngithub.com/Orange-OpenSource/nifikop/pkg/clientwrappers/scale.EnsureRemovedNodes\n\t/workspace/pkg/clientwrappers/scale/scale.go:201\ngithub.com/Orange-OpenSource/nifikop/pkg/resources/nifi.(*Reconciler).Reconcile\n\t/workspace/pkg/resources/nifi/nifi.go:237\ngithub.com/Orange-OpenSource/nifikop/controllers.(*NifiClusterReconciler).Reconcile\n\t/workspace/controllers/nificluster_controller.go:135\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.7.2/pkg/internal/controller/controller.go:263\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.7.2/pkg/internal/controller/controller.go:235\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func1.1\n\t/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.7.2/pkg/internal/controller/controller.go:198\nk8s.io/apimachinery/pkg/util/wait.JitterUntilWithContext.func1\n\t/go/pkg/mod/k8s.io/apimachinery@v0.20.2/pkg/util/wait/wait.go:185\nk8s.io/apimachinery/pkg/util/wait.BackoffUntil.func1\n\t/go/pkg/mod/k8s.io/apimachinery@v0.20.2/pkg/util/wait/wait.go:155\nk8s.io/apimachinery/pkg/util/wait.BackoffUntil\n\t/go/pkg/mod/k8s.io/apimachinery@v0.20.2/pkg/util/wait/wait.go:156\nk8s.io/apimachinery/pkg/util/wait.JitterUntil\n\t/go/pkg/mod/k8s.io/apimachinery@v0.20.2/pkg/util/wait/wait.go:133\nk8s.io/apimachinery/pkg/util/wait.JitterUntilWithContext\n\t/go/pkg/mod/k8s.io/apimachinery@v0.20.2/pkg/util/wait/wait.go:185\nk8s.io/apimachinery/pkg/util/wait.UntilWithContext\n\t/go/pkg/mod/k8s.io/apimachinery@v0.20.2/pkg/util/wait/wait.go:99\nruntime.goexit\n\t/usr/local/go/src/runtime/asm_amd64.s:1374"}
github.com/go-logr/zapr.(*zapLogger).Error
        /go/pkg/mod/github.com/go-logr/zapr@v0.2.0/zapr.go:132
github.com/Orange-OpenSource/nifikop/pkg/nificlient.errorGetOperation
        /workspace/pkg/nificlient/common.go:38
github.com/Orange-OpenSource/nifikop/pkg/nificlient.(*nifiClient).DescribeCluster
        /workspace/pkg/nificlient/system.go:30
github.com/Orange-OpenSource/nifikop/pkg/nificlient.(*nifiClient).Build
        /workspace/pkg/nificlient/client.go:181
github.com/Orange-OpenSource/nifikop/pkg/nificlient.NewFromConfig
        /workspace/pkg/nificlient/client.go:202
github.com/Orange-OpenSource/nifikop/pkg/common.NewClusterConnection
        /workspace/pkg/common/common.go:55
github.com/Orange-OpenSource/nifikop/pkg/clientwrappers/scale.EnsureRemovedNodes
        /workspace/pkg/clientwrappers/scale/scale.go:201
github.com/Orange-OpenSource/nifikop/pkg/resources/nifi.(*Reconciler).Reconcile
        /workspace/pkg/resources/nifi/nifi.go:237
github.com/Orange-OpenSource/nifikop/controllers.(*NifiClusterReconciler).Reconcile
        /workspace/controllers/nificluster_controller.go:135
sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler
        /go/pkg/mod/sigs.k8s.io/controller-runtime@v0.7.2/pkg/internal/controller/controller.go:263
sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem
        /go/pkg/mod/sigs.k8s.io/controller-runtime@v0.7.2/pkg/internal/controller/controller.go:235
sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func1.1
        /go/pkg/mod/sigs.k8s.io/controller-runtime@v0.7.2/pkg/internal/controller/controller.go:198
k8s.io/apimachinery/pkg/util/wait.JitterUntilWithContext.func1
        /go/pkg/mod/k8s.io/apimachinery@v0.20.2/pkg/util/wait/wait.go:185
k8s.io/apimachinery/pkg/util/wait.BackoffUntil.func1
        /go/pkg/mod/k8s.io/apimachinery@v0.20.2/pkg/util/wait/wait.go:155
k8s.io/apimachinery/pkg/util/wait.BackoffUntil
        /go/pkg/mod/k8s.io/apimachinery@v0.20.2/pkg/util/wait/wait.go:156
k8s.io/apimachinery/pkg/util/wait.JitterUntil
        /go/pkg/mod/k8s.io/apimachinery@v0.20.2/pkg/util/wait/wait.go:133
k8s.io/apimachinery/pkg/util/wait.JitterUntilWithContext
        /go/pkg/mod/k8s.io/apimachinery@v0.20.2/pkg/util/wait/wait.go:185
k8s.io/apimachinery/pkg/util/wait.UntilWithContext
        /go/pkg/mod/k8s.io/apimachinery@v0.20.2/pkg/util/wait/wait.go:99
2022-01-10T10:18:24.563Z        INFO    controllers.NifiCluster Nodes unreachable, may still be starting up

Mean while when i describe the nificluster its still says : connecting.

  Service:
    Annotations:
      external-dns.alpha.kubernetes.io/ttl:  5
    Headless Enabled:                        true
  Zk Address:                                zookeeper.zookeeper.svc.cluster.local:2181
  Zk Path:                                   /sslnifinodes
Status:
  Nodes State:
    1:
      Configuration State:  ConfigInSync
      Graceful Action State:
        Task Started:     Mon, 10 Jan 2022 08:49:01 GMT
        Action State:     GracefulUpscaleRunning
        Action Step:      CONNECTING
        Error Message:
      Init Cluster Node:  true
      Pod Is Ready:       true
    2:
      Configuration State:  ConfigInSync
      Graceful Action State:
        Action State:     GracefulUpscaleRequired
        Error Message:
      Init Cluster Node:  true
      Pod Is Ready:       true
    3:
      Configuration State:  ConfigInSync
      Graceful Action State:
        Action State:     GracefulUpscaleRequired
        Error Message:
      Init Cluster Node:  true
      Pod Is Ready:       true
  Prometheus Reporting Task:
    Id:
    Version:  0
  Rolling Upgrade Status:
    Error Count:   0
    Last Success:
  State:           ClusterReconciling
Events:            <none>

@erdrix just wanted to check with you if the nifikop only works with OIDC, your response would be really appreciated.
I have been trying to Identify the root cause but it doesnt seem like any config issue.

@jrmanes can you please try to replicate same scenario may be you might get different results.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

5 participants