Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fixes auth problem in case of openstack kops-controller #8862

Merged
merged 1 commit into from
Apr 7, 2020

Conversation

zetaab
Copy link
Member

@zetaab zetaab commented Apr 7, 2020

fixes #8861 (openstack part hopefully)

@k8s-ci-robot k8s-ci-robot added cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. labels Apr 7, 2020
@k8s-ci-robot
Copy link
Contributor

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: zetaab

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@k8s-ci-robot k8s-ci-robot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Apr 7, 2020
@hakman
Copy link
Member

hakman commented Apr 7, 2020

/lgtm

@k8s-ci-robot k8s-ci-robot added the lgtm "Looks good to me", indicates that a PR is ready to be merged. label Apr 7, 2020
@k8s-ci-robot k8s-ci-robot merged commit 8f12556 into kubernetes:master Apr 7, 2020
@k8s-ci-robot k8s-ci-robot added this to the v1.18 milestone Apr 7, 2020
@mitch000001
Copy link
Contributor

@zetaab Can you confirm that the errors in the logs vanished/the node labels are back in place?
And also, can we backport this to the stable versions out there? I guess this will affect a lot of people

@zetaab zetaab deleted the feature/fixreauth branch July 23, 2020 12:31
@zetaab
Copy link
Member Author

zetaab commented Jul 23, 2020

@mitch000001 yes everything works fine now. We can backport this

@kciredor
Copy link

This was merged into 1.17.2, but I'm afraid I'm getting hit by "Authentication failed" issues.

gophercloud ReAuth default false... I mean... 👎 Now it's fixed for etcd-controller and supposedly for kops-controller but these are the logs many times per minute:

E0915 08:48:02.481845 1 controller.go:218] controller-runtime/controller "msg"="Reconciler error" "error"="unable to load cluster object for node nodes-4-xxx-k8s-local: error loading Cluster "swift://xxx/xxx.k8s.local/cluster.spec": error reading swift://xxx/xxx.k8s.local/cluster.spec: Authentication failed" "controller"="node" "request"={"Namespace":"","Name":"nodes-4-xxx-k8s-local"}

@mitch000001
Copy link
Contributor

So basically the issue is related to the Swift state store client which gets used by the controller. I guess it also needs the reauth setting but the location is probably not within the kops-controller itself but rather within kops code of the state store authentication.
Can you please open another issue where you describe the error so it gets the awareness it should get?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
approved Indicates a PR has been approved by an approver from all required OWNERS files. cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. lgtm "Looks good to me", indicates that a PR is ready to be merged. size/XS Denotes a PR that changes 0-9 lines, ignoring generated files.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

kops-controller stuck - node labels missing
5 participants