Comments (17)
ryannix123
commented on June 1, 2024
Do you have at least 8 GBs of RAM?
from installcentos.
hirenvadalia
commented on June 1, 2024
@ryannix123 Yes I have 16 GB of RAM and 16 cores (8 cpus with 2 cores on each)
from installcentos.
ryannix123
commented on June 1, 2024
Strange. I have half that amount if RAM and those components have never failed to deploy.
from installcentos.
hirenvadalia
commented on June 1, 2024
Can bridge network vs NAT network affect those components? Becuase I am using NAT network instead bridge network in VMWare as shown in video.
from installcentos.
ryannix123
commented on June 1, 2024
I've only used Bridged networking. That could be the issue, although I'm not certain.
from installcentos.
hirenvadalia
commented on June 1, 2024
Ok I can give try using bridge networking... But does openshift have any limitations on NAT networking?
from installcentos.
hirenvadalia
commented on June 1, 2024
@ryannix123 So tried with bridge networking and results is same... registry-console, metrics and logging is still fail to start...
I also looking in pods logs but I have no idea about whatever error it shows:
oc logs po/registry-console-1-9k668
2018/05/10 15:59:33 Failed to generate certificates exit status 1 remotectl: /etc/cockpit/ws-certs.d/0-self-signed.cert: TLS support is not available
oc logs po/hawkular-cassandra-1-78bl8 -n openshift-infra
The MAX_HEAP_SIZE envar is not set. Basing the MAX_HEAP_SIZE on the available memory limit for the pod (2000000000).
The memory limit is less than 2GB. Using 1/2 of available memory for the max_heap_size.
The MAX_HEAP_SIZE has been set to 953M
The HEAP_NEWSIZE envar is not set. Setting the HEAP_NEWSIZE to one third the MAX_HEAP_SIZE: 317M
About to generate seeds
Trying to access the Seed list [try #1]
Trying to access the Seed list [try #2]
Trying to access the Seed list [try #3]
Setting seeds to be hawkular-cassandra-1-78bl8
Creating the Cassandra keystore from the Secret's cert data
Converting the PKCS12 keystore into a Java Keystore
keytool error: java.io.IOException: parseAlgParameters failed: PBE AlgorithmParameters not available
java.io.IOException: parseAlgParameters failed: PBE AlgorithmParameters not available
at sun.security.pkcs12.PKCS12KeyStore.parseAlgParameters(PKCS12KeyStore.java:792)
at sun.security.pkcs12.PKCS12KeyStore.engineLoad(PKCS12KeyStore.java:1998)
at java.security.KeyStore.load(KeyStore.java:1445)
at sun.security.tools.keytool.Main.loadSourceKeyStore(Main.java:1901)
at sun.security.tools.keytool.Main.doImportKeyStore(Main.java:1939)
at sun.security.tools.keytool.Main.doCommands(Main.java:1028)
at sun.security.tools.keytool.Main.run(Main.java:345)
at sun.security.tools.keytool.Main.main(Main.java:338)
Caused by: java.security.NoSuchAlgorithmException: PBE AlgorithmParameters not available
at sun.security.jca.GetInstance.getInstance(GetInstance.java:159)
at java.security.Security.getImpl(Security.java:695)
at java.security.AlgorithmParameters.getInstance(AlgorithmParameters.java:146)
at sun.security.pkcs12.PKCS12KeyStore.parseAlgParameters(PKCS12KeyStore.java:786)
... 7 more
Failed to create a Java Keystore file with the service-specific certificate. Aborting.
oc logs po/hawkular-metrics-mxttm -n openshift-infra
2018-05-10 16:05:29 Starting Hawkular Metrics
unable to write 'random state'
unable to write 'random state'
The service account has read permissions for its project. Proceeding
The service account has permission to watch namespaces. Proceeding
Creating the Hawkular Metrics keystore from the Secret's cert data
unable to write 'random state'
Converting the PKCS12 keystore into a Java Keystore
keytool error: java.io.IOException: parseAlgParameters failed: PBE AlgorithmParameters not available
java.io.IOException: parseAlgParameters failed: PBE AlgorithmParameters not available
at sun.security.pkcs12.PKCS12KeyStore.parseAlgParameters(PKCS12KeyStore.java:792)
at sun.security.pkcs12.PKCS12KeyStore.engineLoad(PKCS12KeyStore.java:1998)
at java.security.KeyStore.load(KeyStore.java:1445)
at sun.security.tools.keytool.Main.loadSourceKeyStore(Main.java:1901)
at sun.security.tools.keytool.Main.doImportKeyStore(Main.java:1939)
at sun.security.tools.keytool.Main.doCommands(Main.java:1028)
at sun.security.tools.keytool.Main.run(Main.java:345)
at sun.security.tools.keytool.Main.main(Main.java:338)
Caused by: java.security.NoSuchAlgorithmException: PBE AlgorithmParameters not available
at sun.security.jca.GetInstance.getInstance(GetInstance.java:159)
at java.security.Security.getImpl(Security.java:695)
at java.security.AlgorithmParameters.getInstance(AlgorithmParameters.java:146)
at sun.security.pkcs12.PKCS12KeyStore.parseAlgParameters(PKCS12KeyStore.java:786)
... 7 more
Failed to create a Java Keystore file with the service-specific certificate. Aborting.
oc logs po/logging-kibana-1-deploy -n logging
--> Scaling logging-kibana-1 to 1
error: update acceptor rejected logging-kibana-1: watch closed before Until timeout
--> Error listing events for replication controller logging-kibana-1: Get https://172.30.0.1:443/api/v1/namespaces/logging/events?fieldSelector=involvedObject.name%3Dlogging-kibana-1%2CinvolvedObject.namespace%3Dlogging%2CinvolvedObject.kind%3DReplicationController%2CinvolvedObject.uid%3D7341117d-546b-11e8-a515-000c29fa4f6f: dial tcp 172.30.0.1:443: getsockopt: connection refused
oc logs po/logging-es-data-master-z2sbetye-1-deploy -n logging
--> Scaling logging-es-data-master-z2sbetye-1 to 1
error: update acceptor rejected logging-es-data-master-z2sbetye-1: watch closed before Until timeout
--> Error listing events for replication controller logging-es-data-master-z2sbetye-1: Get https://172.30.0.1:443/api/v1/namespaces/logging/events?fieldSelector=involvedObject.name%3Dlogging-es-data-master-z2sbetye-1%2CinvolvedObject.namespace%3Dlogging%2CinvolvedObject.kind%3DReplicationController%2CinvolvedObject.uid%3Da2a84609-546b-11e8-a515-000c29fa4f6f: dial tcp 172.30.0.1:443: getsockopt: connection refused
oc logs po/registry-console-1-deploy
--> Scaling registry-console-1 to 1
--> Error listing events for replication controller registry-console-1: Get https://172.30.0.1:443/api/v1/namespaces/default/events?fieldSelector=involvedObject.name%3Dregistry-console-1%2CinvolvedObject.namespace%3Ddefault%2CinvolvedObject.kind%3DReplicationController%2CinvolvedObject.uid%3D9f48d9e8-546a-11e8-a515-000c29fa4f6f: dial tcp 172.30.0.1:443: getsockopt: connection refused
error: update acceptor rejected registry-console-1: watch closed before Until timeout
from installcentos.
hirenvadalia
commented on June 1, 2024
@ryannix123 any update on this? Sorry for pushing this but I really stucked on this...
from installcentos.
ryannix123
commented on June 1, 2024
Do you have ports 80,443, and 8443 open to the world?
from installcentos.
hirenvadalia
commented on June 1, 2024
@ryannix123 Sorry I didn't get you... I am doing this installation in my VM and that VM is only accessible from my host machine... But I can access all above ports from my host machine.
Do I need to setup/configure anything extra, apart from what install-openshift.sh does?
from installcentos.
ryannix123
commented on June 1, 2024
In my experience, the ports I listed have to be open to the world before a successful install can take place.
from installcentos.
hirenvadalia
commented on June 1, 2024
Means I have to add those ports in my router's port forwarding? like @gshipley shown in video?
from installcentos.
ryannix123
commented on June 1, 2024
Correct. Please try that.
from installcentos.
hirenvadalia
commented on June 1, 2024
Alright... let me try that...
BTW Thanks a lot for quick help, really appropriated
from installcentos.
hirenvadalia
commented on June 1, 2024
@ryannix123 Sorry but I can't test with opening ports to world as my network provider doesn't allow that unless I buy static IP, which I don't want to.
So now I can open ports in my internal network only.
BTW why I need to open my openshift setup to world? I don't want to expose my openshift setup to world, as that setup is only for me.
is it possible for you to try without opening those ports to world and see whether you are able to success in installing openshift correctly?
from installcentos.
hirenvadalia
commented on June 1, 2024
@ryannix123 Just update on this: I tried installing openshift v3.7.1 (from commit 2621542) (With replacing 'docker-1.12-6' with 'docker' in install-openshift.sh as docker-1.12.6 is no more available in CentOS 7 by default)
And I got everything up and running including registry-console, metrics and logging...
And I have not exposed any of ports in my router configuration... + I am using NAT networking...
So I guess openshift doesn't have any requirement of exposing ports or using Bridge networking...
Now I have very strong feeling that there is something wrong in release-3.9 branch in openshift-ansible repo, which is restricting successful deployment of registry-console, metrics and logging
from installcentos.
hirenvadalia
commented on June 1, 2024
Looks like today is my lucky day... I tried installing OpenShift v3.9 in same machine (in which OpenShift v3.7.1 installed successfully) and it passed, everything is up and running...
So looks like some problem in my older VM... may I messed up while setting fqdn and domain...
Closing this issue as it is not valid anymore....
from installcentos.
Related Issues (20)
- all check status of * image pre-pull failed HOT 1
- How to add CNS after installation
- pods can not accessible routing issue. HOT 2
- Two Adapters always tries to use NAT for local HOT 1
- OKD 4? HOT 3
- Letsencrypt autorenewal fails for OKD 3.11 HOT 2
- oc login connection refused HOT 7
- FAILED - RETRYING: Wait for control plane pods to appear HOT 1
- Cluster console shows the testing page of the Apache HTTP server
- failed to login to the internal docker registry: x509: certificate is valid for lz-virtualserver01-centos7-lamp.zhangllc.cloud, not docker-registry-default.apps.169.54.173.22.nip.io
- https://console.xxx.com:8443 not opening HOT 3
- Multi-node installation HOT 1
- Install failed deploy_cluster.yml could not be found HOT 1
- Centos 8 HOT 2
- Anyway to update the default PHP container?
- Stuck at FAILED - RETRYING: Wait for all control plane pods to come up and become ready HOT 4
- Working with Subdomains HOT 1
- Service catalog install failed HOT 1
- Error: timed out waiting for the condition
- Redeployment of certificates fails
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from installcentos.