-
Notifications
You must be signed in to change notification settings - Fork 4.6k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
fixes auth problem in case of openstack kops-controller #8862
Conversation
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: zetaab The full list of commands accepted by this bot can be found here. The pull request process is described here
Needs approval from an approver in each of these files:
Approvers can indicate their approval by writing |
/lgtm |
@zetaab Can you confirm that the errors in the logs vanished/the node labels are back in place? |
@mitch000001 yes everything works fine now. We can backport this |
This was merged into 1.17.2, but I'm afraid I'm getting hit by "Authentication failed" issues. gophercloud ReAuth default false... I mean... 👎 Now it's fixed for etcd-controller and supposedly for kops-controller but these are the logs many times per minute: E0915 08:48:02.481845 1 controller.go:218] controller-runtime/controller "msg"="Reconciler error" "error"="unable to load cluster object for node nodes-4-xxx-k8s-local: error loading Cluster "swift://xxx/xxx.k8s.local/cluster.spec": error reading swift://xxx/xxx.k8s.local/cluster.spec: Authentication failed" "controller"="node" "request"={"Namespace":"","Name":"nodes-4-xxx-k8s-local"} |
So basically the issue is related to the Swift state store client which gets used by the controller. I guess it also needs the reauth setting but the location is probably not within the kops-controller itself but rather within kops code of the state store authentication. |
fixes #8861 (openstack part hopefully)