plugin fails to connect to apiserver when using IPv6 #446
Comments
|
on the other hand, the plugin status page shows all the details of the cluster just OK |
|
With which values are you configuring the cluster profile when manually configuring? Which plugin version? |
config XML snippet for the plugin: <elastic>
<agentProfiles>
<agentProfile id="demo-app" clusterProfileId="k8-cluster-profile">
<property>
<key>PodSpecType</key>
<value>yaml</value>
</property>
<property>
<key>Privileged</key>
</property>
<property>
<key>MaxCPU</key>
</property>
<property>
<key>Environment</key>
</property>
<property>
<key>Image</key>
<value>gocd/gocd-agent-wolfi:v24.4.0</value>
</property>
<property>
<key>PodConfiguration</key>
<value>apiVersion: v1
kind: Pod
metadata:
name: gocd-agent-{{ POD_POSTFIX }}
labels:
app: web
spec:
serviceAccountName: default
containers:
- name: gocd-agent-container-{{ CONTAINER_POSTFIX }}
image: gocd/gocd-agent-wolfi:v24.4.0</value>
</property>
<property>
<key>SpecifiedUsingPodConfiguration</key>
</property>
<property>
<key>RemoteFile</key>
</property>
<property>
<key>MaxMemory</key>
</property>
<property>
<key>RemoteFileType</key>
<value>json</value>
</property>
</agentProfile>
<agentProfile id="testep" clusterProfileId="test">
<property>
<key>Image</key>
</property>
<property>
<key>MaxMemory</key>
</property>
<property>
<key>MaxCPU</key>
</property>
<property>
<key>Environment</key>
</property>
<property>
<key>PodConfiguration</key>
<value>apiVersion: v1
kind: Pod
metadata:
name: pod-name-prefix-{{ POD_POSTFIX }}
labels:
app: web
spec:
containers:
- name: gocd-agent-container-{{ CONTAINER_POSTFIX }}
image: {{ GOCD_AGENT_IMAGE }}:{{ LATEST_VERSION }}
securityContext:
privileged: true</value>
</property>
<property>
<key>SpecifiedUsingPodConfiguration</key>
</property>
<property>
<key>PodSpecType</key>
<value>yaml</value>
</property>
<property>
<key>RemoteFile</key>
</property>
<property>
<key>RemoteFileType</key>
<value>json</value>
</property>
<property>
<key>Privileged</key>
</property>
</agentProfile>
</agentProfiles>
<clusterProfiles>
<clusterProfile id="k8-cluster-profile" pluginId="cd.go.contrib.elasticagent.kubernetes">
<property>
<key>go_server_url</key>
<value>http://gocd-test-server.gocd-test:8153/go</value>
</property>
<property>
<key>auto_register_timeout</key>
</property>
<property>
<key>pending_pods_count</key>
</property>
<property>
<key>kubernetes_cluster_url</key>
<value>kubernetes.default</value>
</property>
<property>
<key>security_token</key>
</property>
<property>
<key>kubernetes_cluster_ca_cert</key>
<encryptedValue>AES:MV4LVxkmdK/qRcj8MMEFNA==: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</encryptedValue>
</property>
<property>
<key>namespace</key>
</property>
<property>
<key>cluster_request_timeout</key>
</property>
</clusterProfile>
<clusterProfile id="test" pluginId="cd.go.contrib.elasticagent.kubernetes">
<property>
<key>go_server_url</key>
<value>http://gocd-test-server.gocd-test:8153/go</value>
</property>
<property>
<key>auto_register_timeout</key>
</property>
<property>
<key>pending_pods_count</key>
</property>
<property>
<key>kubernetes_cluster_url</key>
<value>kubernetes.default</value>
</property>
<property>
<key>security_token</key>
</property>
<property>
<key>kubernetes_cluster_ca_cert</key>
<encryptedValue>AES:MV4LVxkmdK/qRcj8MMEFNA==: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</encryptedValue>
</property>
<property>
<key>namespace</key>
</property>
<property>
<key>cluster_request_timeout</key>
</property>
</clusterProfile>
</clusterProfiles>
</elastic>Plugin Version 4.1.0-606 Funny thing is that I cloned the 'default' profile to a new one called I still have exceptions; I assume it is from the plugin polling the default cluster profile. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
I have problems with the pure default setup of GoCD with all-defaults coming from the Helm chart. The only 'exception' is the Kubernetes namespace name used, which is called
gocd-test. Seems like it wants to evaluate the string offd4d:4045:e5e8:f1::1against the list of cert SANs. It happens even so when I specify the host via thekubernetes_cluster_urland/or the apiserver signer's cert viakubernetes_cluster_ca_cert.Static agents (by increased replica count for GoCD Agent ReplicaSets) on the same cluster work. Connection to K8s API server also works from the pod using
openssl s_client.Log for the plugin:
The X.509 attributes and the certificate itself for the API server are:
The text was updated successfully, but these errors were encountered: