cli icon indicating copy to clipboard operation
cli copied to clipboard

error install SLS SNO

Open GuilhermeFAC opened this issue 1 year ago • 5 comments

MAS CLI version

11.11.3

CLI function used

install

What happened?

I'm trying to install mas on a sno cluster, and when I get to the sls task I get the following error

fatal: [localhost]: FAILED! => {"cache_control": "private, max-age=0, no-cache, no-store", "changed": false, "content_type": "text/html", "elapsed": 0, "msg": "Status code was 503 and not [200, -1]: HTTP Error 503: Service Unavailable", "pragma": "no-cache", "redirected": false, "status": 503, "url": "https://sls.ibm-sls.svc/api/clients/sls"}

I noticed that the service and the sls route are not created, I've never had this problem with a normal cluster. I have already uninstalled the cluster and created one from scratch and it always gives the same error.

Relevant log output

--------------------------- Ansible Task StdOut -------------------------------

TASK [licenseservice : Confirm client API] *************************************
[1;30mtask path: /opt/ansible/roles/licenseservice/tasks/status-update.yml:2[0m

-------------------------------------------------------------------------------
{"level":"info","ts":"2024-12-03T18:25:42Z","logger":"logging_event_handler","msg":"[playbook task start]","name":"sls","namespace":"ibm-sls","gvk":"sls.ibm.com/v1, Kind=LicenseService","event_type":"playbook_on_task_start","job":"4480755426360977644","EventData.Name":"licenseservice : Confirm client API"}

--------------------------- Ansible Task StdOut -------------------------------

TASK [licenseservice : Confirm client API] *************************************
[1;30mtask path: /opt/ansible/roles/licenseservice/tasks/status-update.yml:20[0m

-------------------------------------------------------------------------------
{"level":"info","ts":"2024-12-03T18:25:42Z","logger":"logging_event_handler","msg":"[playbook task start]","name":"sls","namespace":"ibm-sls","gvk":"sls.ibm.com/v1, Kind=LicenseService","event_type":"playbook_on_task_start","job":"4480755426360977644","EventData.Name":"licenseservice : Confirm client API"}

--------------------------- Ansible Task StdOut -------------------------------

 TASK [Confirm client API] ******************************** 
[0;31mfatal: [localhost]: FAILED! => {"cache_control": "private, max-age=0, no-cache, no-store", "changed": false, "content_type": "text/html", "elapsed": 0, "msg": "Status code was 503 and not [200, -1]: HTTP Error 503: Service Unavailable", "pragma": "no-cache", "redirected": false, "status": 503, "url": "https://sls.ibm-sls.svc/api/clients/sls"}[0m

GuilhermeFAC avatar Dec 03 '24 18:12 GuilhermeFAC

image image image

GuilhermeFAC avatar Dec 03 '24 18:12 GuilhermeFAC

@terenceq

Good morning, could you help?

GuilhermeFAC avatar Dec 04 '24 12:12 GuilhermeFAC

image

GuilhermeFAC avatar Dec 04 '24 12:12 GuilhermeFAC

I created the service manually and installed sls, but now in core in slscfg I get this error

service:

kind: Service apiVersion: v1 metadata: annotations: prometheus.io/scrape: 'true' name: sls namespace: ibm-sls ownerReferences: - apiVersion: sls.ibm.com/v1 kind: LicenseService name: sls uid: 168f02c0-5444-4dd7-9289-cf40856be1aa labels: app: sls-api-licensing app.kubernetes.io/instance: sls app.kubernetes.io/managed-by: ibm-sls-controller-manager app.kubernetes.io/name: sls spec: ipFamilies: - IPv4 ports: - name: api-licensing protocol: TCP port: 443 targetPort: 9443 internalTrafficPolicy: Cluster type: ClusterIP ipFamilyPolicy: SingleStack sessionAffinity: None selector: app: sls-api-licensing status: loadBalancer: {}

error slscfg - core

TASK [slscfg : Check MAS Licensing API endpoint] ******************************* task path: /opt/ansible/roles/slscfg/tasks/services/check-licensing.yml:8

{"level":"error","ts":"2024-12-04T13:24:09Z","logger":"logging_event_handler","msg":"","name":"tdsitc-sls-system","namespace":"mas-tdsitc-core","gvk":"config.mas.ibm.com/v1, Kind=SlsCfg","event_type":"runner_on_failed","job":"7672563113826011823","EventData.Task":"Check MAS Licensing API endpoint","EventData.TaskArgs":"","EventData.FailedTaskPath":"/opt/ansible/roles/slscfg/tasks/services/check-licensing.yml:8","error":"[playbook task failed]","stacktrace":"github.com/operator-framework/ansible-operator-plugins/internal/ansible/events.loggingEventHandler.Handle\n\tansible-operator-plugins/internal/ansible/events/log_events.go:111"} --------------------------- Ansible Task StdOut ------------------------------- TASK [Check MAS Licensing API endpoint] ******************************** fatal: [localhost]: FAILED! => {"attempts": 8, "changed": false, "error": "Unknown error thrown while checking MAS Licensing API. Failure: HTTPSConnectionPool(host='licensing-mediator.mas-tdsitc-core.svc.cluster.local', port=443): Max retries exceeded with url: /api/licensing/entitlement/config (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self signed certificate in certificate chain (_ssl.c:1133)')))", "ready": false}

image

GuilhermeFAC avatar Dec 04 '24 13:12 GuilhermeFAC

@terenceq

GuilhermeFAC avatar Jan 15 '25 19:01 GuilhermeFAC