Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

oathkeeper-maester start failed #104

Closed
YeLuoYiFanChen opened this issue Jan 1, 2020 · 4 comments
Closed

oathkeeper-maester start failed #104

YeLuoYiFanChen opened this issue Jan 1, 2020 · 4 comments

Comments

@YeLuoYiFanChen
Copy link

hello,I start a oathkeeper in kubernate with helm ,but a pod named oathkeeper-maester start failed,this is a pod log abuout oathkeeper-maester, what it is reason for this?

2020-01-01T08:18:44.365Z INFO setup using default values for authenticatorsAvailable
2020-01-01T08:18:44.365Z INFO setup using default values for authorizersAvailable
2020-01-01T08:18:44.365Z INFO setup using default values for mutatorsAvailable
2020-01-01T08:18:44.366Z INFO controller-runtime.controller Starting EventSource {"controller": "rule", "source": "kind source: /, Kind="}
2020-01-01T08:18:44.366Z ERROR controller-runtime.source if kind is a CRD, it should be installed before calling Start {"kind": "Rule.oathkeeper.ory.sh", "error": "no matches for kind "Rule" in version "oathkeeper.ory.sh/v1alpha1""}
github.com/go-logr/zapr.(*zapLogger).Error
/go/pkg/mod/github.com/go-logr/zapr@v0.1.0/zapr.go:128
sigs.k8s.io/controller-runtime/pkg/source.(*Kind).Start
/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.2.0-beta.2/pkg/source/source.go:88
sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Watch
/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.2.0-beta.2/pkg/internal/controller/controller.go:122
sigs.k8s.io/controller-runtime/pkg/builder.(*Builder).doWatch
/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.2.0-beta.2/pkg/builder/build.go:191
sigs.k8s.io/controller-runtime/pkg/builder.(*Builder).Build
/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.2.0-beta.2/pkg/builder/build.go:180
sigs.k8s.io/controller-runtime/pkg/builder.(*Builder).Complete
/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.2.0-beta.2/pkg/builder/build.go:147
github.com/ory/oathkeeper-maester/controllers.(*RuleReconciler).SetupWithManager
/go/src/github.com/ory/oathkeeper-maester/controllers/rule_controller.go:120
main.main
/go/src/github.com/ory/oathkeeper-maester/main.go:100
runtime.main
/usr/local/go/src/runtime/proc.go:200
2020-01-01T08:18:44.366Z ERROR setup unable to create controller {"controller": "Rule", "error": "no matches for kind "Rule" in version "oathkeeper.ory.sh/v1alpha1""}
github.com/go-logr/zapr.(*zapLogger).Error
/go/pkg/mod/github.com/go-logr/zapr@v0.1.0/zapr.go:128
main.main
/go/src/github.com/ory/oathkeeper-maester/main.go:102
runtime.main
/usr/local/go/src/runtime/proc.go:200

@aeneasr
Copy link
Member

aeneasr commented Jan 2, 2020 via email

@YeLuoYiFanChen
Copy link
Author

YeLuoYiFanChen commented Jan 2, 2020

Please provider your config, it‘s not possible to help otherwise.

On 1. Jan 2020, at 09:44, YeLuoYiFanChen @.> wrote:  hello,I start a oathkeeper in kubernate with helm ,but a pod named oathkeeper-maester start failed,this is a pod log abuout oathkeeper-maester, what it is reason for this? 2020-01-01T08:18:44.365Z INFO setup using default values for authenticatorsAvailable 2020-01-01T08:18:44.365Z INFO setup using default values for authorizersAvailable 2020-01-01T08:18:44.365Z INFO setup using default values for mutatorsAvailable 2020-01-01T08:18:44.366Z INFO controller-runtime.controller Starting EventSource {"controller": "rule", "source": "kind source: /, Kind="} 2020-01-01T08:18:44.366Z ERROR controller-runtime.source if kind is a CRD, it should be installed before calling Start {"kind": "Rule.oathkeeper.ory.sh", "error": "no matches for kind "Rule" in version "oathkeeper.ory.sh/v1alpha1""} github.com/go-logr/zapr.(zapLogger).Error @./zapr.go:128 sigs.k8s.io/controller-runtime/pkg/source.(Kind).Start @./pkg/source/source.go:88 sigs.k8s.io/controller-runtime/pkg/internal/controller.(Controller).Watch @./pkg/internal/controller/controller.go:122 sigs.k8s.io/controller-runtime/pkg/builder.(Builder).doWatch @./pkg/builder/build.go:191 sigs.k8s.io/controller-runtime/pkg/builder.(Builder).Build @./pkg/builder/build.go:180 sigs.k8s.io/controller-runtime/pkg/builder.(Builder).Complete @./pkg/builder/build.go:147 github.com/ory/oathkeeper-maester/controllers.(RuleReconciler).SetupWithManager /go/src/github.com/ory/oathkeeper-maester/controllers/rule_controller.go:120 main.main /go/src/github.com/ory/oathkeeper-maester/main.go:100 runtime.main /usr/local/go/src/runtime/proc.go:200 2020-01-01T08:18:44.366Z ERROR setup unable to create controller {"controller": "Rule", "error": "no matches for kind "Rule" in version "oathkeeper.ory.sh/v1alpha1""} github.com/go-logr/zapr.(zapLogger).Error @./zapr.go:128 main.main /go/src/github.com/ory/oathkeeper-maester/main.go:102 runtime.main /usr/local/go/src/runtime/proc.go:200 — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub, or unsubscribe.

hi,this is my config :

oathkeeper:
  ingress:
    proxy:
      enabled: true
      hosts:
        - host: console.gds.cloud
          paths: ["/api"]
  fullnameOverride: infra-oathkeeper
  image:
    tag: v0.32.1-beta.1
  oathkeeper:
    config:
      authenticators:
        oauth2_introspection:
          enabled: true
          config:
            introspection_url:  http://infra-hydra-admin:4445/oauth2/introspect
      authorizers:
        allow:
          enabled: true
      mutators:
        noop:
          enabled: true
    accessRules: |-
      [
        {
          "id": "backend",
          "upstream": {
            "strip_path": "/api/backend",
            "preserve_host": true,
            "url": "http://app-console-backend:3000/api"
          },
          "match": {
              "url": "http://console.gds.cloud/api/backend/<.*>",
              "methods": [
                  "GET",
                  "POST",
                  "PUT",
                  "DELETE",
                  "PATCH"
              ]
          },
          "authenticators": [
              {
                "handler": "oauth2_introspection",
                "config": {
                  "introspection_url": "http://infra-hydra-admin:4445/oauth2/introspect",
                  "scope_strategy": "exact"
                }
              }
          ],
          "authorizer": {
              "handler": "allow"
          },
          "mutators": [
              {
                  "handler": "noop"
              }
          ]
        }, {
          "id": "cmdb",
          "upstream": {
            "strip_path": "/api/cmdb",
            "preserve_host": true,
            "url": "http://app-cmdb-server:3000"
          },
          "match": {
              "url": "http://console.gds.cloud/api/cmdb/<.*>",
              "methods": [
                  "GET",
                  "POST",
                  "PUT",
                  "DELETE",
                  "PATCH"
              ]
          },
          "authenticators": [
              {
                "handler": "oauth2_introspection",
                "config": {
                  "introspection_url": "http://infra-hydra-admin:4445/oauth2/introspect",
                  "scope_strategy": "exact"
                }
              }
          ],
          "authorizer": {
              "handler": "allow"
          },
          "mutators": [
              {
                  "handler": "noop"
              }
          ]
        }, {
          "id": "id_provider",
          "upstream": {
            "strip_path": "/api/id_provider",
            "preserve_host": true,
            "url": "http://app-user-management:3000/secure/api"
          },
          "match": {
              "url": "http://console.gds.cloud/api/id_provider/<.*>",
              "methods": [
                  "GET",
                  "POST",
                  "PUT",
                  "DELETE",
                  "PATCH"
              ]
          },
          "authenticators": [
              {
                "handler": "oauth2_introspection",
                "config": {
                  "introspection_url": "http://infra-hydra-admin:4445/oauth2/introspect",
                  "scope_strategy": "exact"
                }
              }
          ],
          "authorizer": {
              "handler": "allow"
          },
          "mutators": [
              {
                  "handler": "noop"
              }
          ]
        }, {
          "id": "git",
          "upstream": {
            "strip_path": "/api/git",
            "preserve_host": true,
            "url": "http://git.x.gds.internal"
          },
          "match": {
              "url": "http://console.gds.cloud/api/git/<.*>",
              "methods": [
                  "GET",
                  "POST",
                  "PUT",
                  "DELETE"
              ]
          },
          "authenticators": [
              {
                "handler": "oauth2_introspection",
                "config": {
                  "introspection_url": "http://infra-hydra-admin:4445/oauth2/introspect",
                  "scope_strategy": "exact"
                }
              }
          ],
          "authorizer": {
              "handler": "allow"
          },
          "mutators": [
              {
                  "handler": "noop"
              }
          ]
        },
        {
          "id": "provider",
          "upstream": {
            "strip_path": "/api/provider",
            "preserve_host": true,
            "url": "http://app-terraform-provider-collector:3000"
          },
          "match": {
              "url": "http://console.gds.cloud/api/provider/<.*>",
              "methods": [
                  "GET",
                  "POST",
                  "PUT",
                  "DELETE"
              ]
          },
          "authenticators": [
              {
                "handler": "oauth2_introspection",
                "config": {
                  "introspection_url": "http://infra-hydra-admin:4445/oauth2/introspect",
                  "scope_strategy": "exact"
                }
              }
          ],
          "authorizer": {
              "handler": "allow"
          },
          "mutators": [
              {
                  "handler": "noop"
              }
          ]
        }
      ]

and oathkeeper version is 0.0.47

@aeneasr
Copy link
Member

aeneasr commented Jan 7, 2020

Can you try helm chart version 0.0.48 and set:

maester:
  enabled: false

@YeLuoYiFanChen
Copy link
Author

Can you try helm chart version 0.0.48 and set:

maester:
  enabled: false

thank you ,I resolved the problem by upgrade chart version to 0.0.48,but I don't understand what dose cause it? thanks for support again

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants