harbor-boshrelease icon indicating copy to clipboard operation
harbor-boshrelease copied to clipboard

Passing an incorrect certificate in the Harbor installation corrupts the install

Open Turbots opened this issue 4 years ago • 1 comments

Hello,

We tried installing Harbor Bosh release in Enterprise PKS and provided an incorrect certificate.

The timeout for the pre-start script in the Bosh release was set to the default of 60 minutes.

The prestart script fails at this line: https://github.com/vmware/harbor-boshrelease/blob/master/jobs/harbor/templates/bin/pre-start.erb.sh#L309

You can see that, if the certificate is incorrect, it will continue to return something other than HTTP 200 OK which means this script will stall the process for 60 minutes, without much feedback, even in the logs, there's nothing there except the echo statement. Also, since the problem is in the pre-start script, monit will not boot up properly.

Possible solutions:

  • avoid doing lots of logic in a pre-start script, these are run directly by Bosh
  • give better error logging on why harbor is not coming up (even the HTTP code would help a lot)

Turbots avatar Jul 09 '20 08:07 Turbots