Comments (12)
fabianonunes
commented on June 16, 2024
This bug was addressed in #568, but the it hasn't been released yet. You can give the nightly tag a try (--set controller.image.tag=nightly).
from kubernetes-ingress.
aep
commented on June 16, 2024
thanks. nightly doesnt appear to listen to anything
# _version=1
# HAProxy Technologies
# https://www.haproxy.com/
#
# this file is not meant to be changed directly
# it is under haproxy ingress controller management
#
global
daemon
master-worker
pidfile /var/run/haproxy.pid
stats socket /var/run/haproxy-runtime-api.sock level admin expose-fd listeners
default-path config
defaults
timeout http-request 5000
timeout connect 5000
timeout client 50000
timeout queue 5000
timeout server 50000
timeout tunnel 3600000
timeout http-keep-alive 60000
peers localinstance
peer local 127.0.0.1:10000
frontend https
mode http
http-request set-var(txn.base) base
use_backend %[var(txn.path_match),field(1,.)]
frontend http
mode http
http-request set-var(txn.base) base
use_backend %[var(txn.path_match),field(1,.)]
frontend healthz
mode http
monitor-uri /healthz
option dontlog-normal
frontend stats
mode http
http-request set-var(txn.base) base
http-request use-service prometheus-exporter if { path /metrics }
stats enable
stats uri /
stats refresh 10s
[WARNING] (213) : config : frontend 'https' has no 'bind' directive. Please declare it as a backend if this was intended.
[WARNING] (213) : config : frontend 'http' has no 'bind' directive. Please declare it as a backend if this was intended.
[WARNING] (213) : config : frontend 'healthz' has no 'bind' directive. Please declare it as a backend if this was intended.
[WARNING] (213) : config : frontend 'stats' has no 'bind' directive. Please declare it as a backend if this was intended.
[WARNING] (213) : config : Removing incomplete section 'peers localinstance' (no peer named 'uca2k').
[NOTICE] (213) : New worker (253) forked
[NOTICE] (213) : Loading success.
from kubernetes-ingress.
fabianonunes
commented on June 16, 2024
During the initial initialization, it won't listen on any port. However, after the first fork, it will then select the ports you have chosen.
from kubernetes-ingress.
aep
commented on June 16, 2024
i'm not sure what that means but the helm chart install a health check, which is failing because the stats endpoint isnt up, so the container is being deleted
from kubernetes-ingress.
aep
commented on June 16, 2024
Warning Unhealthy 7m6s (x20 over 7m25s) kubelet Startup probe failed: Get "http://10.182.192.1:1042/healthz": dial tcp 10.182.192.1:1042: connect: connection refused
Normal Killing 7m6s kubelet Container kubernetes-ingress-control
[s6-init] making user provided files available at /var/run/s6/etc...exited 0.
[s6-init] ensuring user provided files have correct perms...exited 0.
[fix-attrs.d] applying ownership & permissions fixes...
[fix-attrs.d] done.
[cont-init.d] executing container initialization scripts...
[cont-init.d] 01-aux-cfg: executing...
[cont-init.d] 01-aux-cfg: exited 0.
[cont-init.d] done.
[services.d] starting services
Memory limit for HAProxy: 6618MiB
[services.d] done.
Memory limit for Ingress Controller: 3309MiB
2023/11/14 12:29:20 maxprocs: Leaving GOMAXPROCS=64: CPU quota undefined
2023/11/14 12:29:20
_ _ _ ____
| | | | / \ | _ \ _ __ _____ ___ _
| |_| | / _ \ | |_) | '__/ _ \ \/ / | | |
| _ |/ ___ \| __/| | | (_) > <| |_| |
|_| |_/_/ \_\_| |_| \___/_/\_\\__, |
_ __ _ |___/ ___ ____
| |/ / _| |__ ___ _ __ _ __ ___| |_ ___ ___ |_ _/ ___|
| ' / | | | '_ \ / _ \ '__| '_ \ / _ \ __/ _ \/ __| | | |
| . \ |_| | |_) | __/ | | | | | __/ || __/\__ \ | | |___
|_|\_\__,_|_.__/ \___|_| |_| |_|\___|\__\___||___/ |___\____|
2023/11/14 12:29:20 HAProxy Ingress Controller dev dirty
2023/11/14 12:29:20 Build from:
2023/11/14 12:29:20 Git commit date:
2023/11/14 12:29:20 ConfigMap: haproxy-controller/haproxy-controller-kubernetes-ingress
2023/11/14 12:29:20 Ingress class: haproxy
2023/11/14 12:29:20 Empty Ingress class: false
2023/11/14 12:29:20 Publish service: haproxy-controller/haproxy-controller-kubernetes-ingress
2023/11/14 12:29:20 Using local backend service on port: 6061
2023/11/14 12:29:20 Default ssl certificate: haproxy-controller/haproxy-controller-kubernetes-ingress-default-cert
2023/11/14 12:29:20 Frontend HTTP listening on: 0.0.0.0:80
2023/11/14 12:29:20 Frontend HTTPS listening on: 0.0.0.0:443
2023/11/14 12:29:20 Controller sync period: 5s
2023/11/14 12:29:20 Running on uca1k
[NOTICE] (212) : haproxy version is 2.8.3-86e043a
[WARNING] (212) : config : frontend 'https' has no 'bind' directive. Please declare it as a backend if this was intended.
[WARNING] (212) : config : frontend 'http' has no 'bind' directive. Please declare it as a backend if this was intended.
[WARNING] (212) : config : frontend 'healthz' has no 'bind' directive. Please declare it as a backend if this was intended.
[WARNING] (212) : config : frontend 'stats' has no 'bind' directive. Please declare it as a backend if this was intended.
2023/11/14 12:29:20 k8s/main.go:95 [] Running on Kubernetes version: v1.28.3 linux/amd64
[WARNING] (212) : config : Removing incomplete section 'peers localinstance' (no peer named 'uca1k').
2023/11/14 12:29:20 INFO k8s/main.go:182 [] Global CR defined in API core.haproxy.org/v1alpha2
2023/11/14 12:29:20 INFO k8s/main.go:182 [] Defaults CR defined in API core.haproxy.org/v1alpha2
2023/11/14 12:29:20 INFO k8s/main.go:182 [] Backend CR defined in API core.haproxy.org/v1alpha2
2023/11/14 12:29:20 INFO builder.go:220 [] running controller data server on :6060, running, prometheus
2023/11/14 12:29:20 INFO builder.go:244 [] running default backend server on :6061
Error : failed to initialize haproxy API client: dial unix /var/run/haproxy-runtime-api.sock: connect: no such file or directory
2023/11/14 12:29:20 PANIC src/main.go:124 [] failed to initialize haproxy API client: dial unix /var/run/haproxy-runtime-api.sock: connect: no such file or directory
[NOTICE] (212) : New worker (252) forked
[NOTICE] (212) : Loading success.
Memory limit for Ingress Controller: 3309MiB
2023/11/14 12:29:21 maxprocs: Leaving GOMAXPROCS=64: CPU quota undefined
2023/11/14 12:29:21
_ _ _ ____
| | | | / \ | _ \ _ __ _____ ___ _
| |_| | / _ \ | |_) | '__/ _ \ \/ / | | |
| _ |/ ___ \| __/| | | (_) > <| |_| |
|_| |_/_/ \_\_| |_| \___/_/\_\\__, |
_ __ _ |___/ ___ ____
| |/ / _| |__ ___ _ __ _ __ ___| |_ ___ ___ |_ _/ ___|
| ' / | | | '_ \ / _ \ '__| '_ \ / _ \ __/ _ \/ __| | | |
| . \ |_| | |_) | __/ | | | | | __/ || __/\__ \ | | |___
|_|\_\__,_|_.__/ \___|_| |_| |_|\___|\__\___||___/ |___\____|
2023/11/14 12:29:21 HAProxy Ingress Controller dev dirty
2023/11/14 12:29:21 Build from:
2023/11/14 12:29:21 Git commit date:
2023/11/14 12:29:21 ConfigMap: haproxy-controller/haproxy-controller-kubernetes-ingress
2023/11/14 12:29:21 Ingress class: haproxy
2023/11/14 12:29:21 Empty Ingress class: false
2023/11/14 12:29:21 Publish service: haproxy-controller/haproxy-controller-kubernetes-ingress
2023/11/14 12:29:21 Using local backend service on port: 6061
2023/11/14 12:29:21 Default ssl certificate: haproxy-controller/haproxy-controller-kubernetes-ingress-default-cert
2023/11/14 12:29:21 Frontend HTTP listening on: 0.0.0.0:80
2023/11/14 12:29:21 Frontend HTTPS listening on: 0.0.0.0:443
2023/11/14 12:29:21 Controller sync period: 5s
2023/11/14 12:29:21 Running on uca1k
[NOTICE] (212) : haproxy version is 2.8.3-86e043a
[WARNING] (212) : Exiting Master process...
[ALERT] (212) : Current worker (252) exited with code 143 (Terminated)
[WARNING] (212) : All workers exited. Exiting... (0)
[cont-finish.d] executing container finish scripts...
[cont-finish.d] done.
[s6-finish] waiting for services.
[s6-finish] sending all processes the TERM signal.
[s6-finish] sending all processes the KILL signal and exiting.
from kubernetes-ingress.
fabianonunes
commented on June 16, 2024
Increase the startup failure threshold (--set controller.startupProbe.failureThreshold=300). It's possible that the startup is too slow.
from kubernetes-ingress.
aep
commented on June 16, 2024
that didnt help. it just never starts listening on port 1042
from kubernetes-ingress.
ivanmatmati
commented on June 16, 2024
Hi @aep , We'll have a look at your issue. Thanks for reporting.
from kubernetes-ingress.
ivanmatmati
commented on June 16, 2024
Hi @aep , can you specify the version of Helm Charts you're using ?
from kubernetes-ingress.
ivanmatmati
commented on June 16, 2024
I've run some test with version 1.34.1 from Helm Charts, which should be correct according the controller version in your logs, and nothing wrong. I got:
frontend http
mode http
bind 0.0.0.0:80 name v4
bind :::80 name v6
http-request set-var(txn.base) base
http-request set-var(txn.path) path
http-request set-var(txn.host) req.hdr(Host),field(1,:),lower
http-request set-var(txn.host_match) var(txn.host),map(/etc/haproxy/maps/host.map)
http-request set-var(txn.host_match) var(txn.host),regsub(^[^.]*,,),map(/etc/haproxy/maps/host.map,'') if !{ var(txn.host_match) -m found }
http-request set-var(txn.path_match) var(txn.host_match),concat(,txn.path,),map(/etc/haproxy/maps/path-exact.map)
http-request set-var(txn.path_match) var(txn.host_match),concat(,txn.path,),map_beg(/etc/haproxy/maps/path-prefix.map) if !{ var(txn.path_match) -m found }
use_backend %[var(txn.path_match),field(1,.)]
default_backend haproxy-controller_default-local-service_http
frontend https
mode http
bind 0.0.0.0:443 name v4 crt /etc/haproxy/certs/frontend ssl alpn h2,http/1.1
bind :::443 name v6 crt /etc/haproxy/certs/frontend ssl alpn h2,http/1.1
http-request set-var(txn.base) base
http-request set-var(txn.path) path
http-request set-var(txn.host) req.hdr(Host),field(1,:),lower
...
BTW, I've noticed a typo in your command line, you missed the last number in port number. It should be 443 not 44.
from kubernetes-ingress.
ivanmatmati
commented on June 16, 2024
Can you check the logs of your attempt with the official release ? Because it seems that you've got something wrong preventing the computation of the very first transaction and you're stuck with the default haproxy configuration file. If necessary increase the log level by adding the extra args --log=debug. You add it in your values.yaml at this place:
controller:
extraArgs:
- --log=debug
from kubernetes-ingress.
ivanmatmati
commented on June 16, 2024
Closed because no activity
from kubernetes-ingress.
Related Issues (20)
- annotation "haproxy.org/load-balance: uri path-only" causes configuration reloads HOT 2
- Access logs settings get overridden if using a Global Custom Resource HOT 6
- constant prometheus reloading HOT 4
- default backend not working when --ingress.class defined HOT 2
- Regular expressions in "path" do not appear to work HOT 1
- docs: `haproxy.org/server-ssl` tip is misleading HOT 1
- Ingress reloading almost all the time with v1.11.1 HOT 1
- Add ability to use oauth2 authentication. HOT 3
- Use existing NLB for HAProxy ingress HOT 2
- questions about request headers HOT 3
- http -> https default redirect not working by default HOT 10
- Deployment yaml still point to privileged port after s6 upgrade HOT 3
- frontend tcp-514: cannot bind socket (Permission denied) for [0.0.0.0:514] HOT 2
- haproxy ingress 1.11.2 reloads when number of backend pods scales HOT 9
- When specifying a server-proto annotation the check parameter is omitted
- Using both annotations "haproxy.org/cr-backend" and "haproxy.org/<parameter>" HOT 3
- Docs: when adjusting --sync-period, must also adjust initialDelaySeconds HOT 4
- Controller restarts haproxy every 5 minutes with message "restart required : Global config updated: " HOT 4
- Docs: Add info about --job-check-crd to documentation HOT 1
- Ingress Pods Fail to Start HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from kubernetes-ingress.