Comments (6)
martinkennelly
commented on August 15, 2024
1
1.6673120787868598e+09 INFO Starting server {"path": "/metrics", "kind": "metrics", "addr": "127.0.0.1:39300"}
1.6673120787868595e+09 INFO Starting server {"kind": "health probe", "addr": "[::]:8081"}
I1101 14:14:38.786949 1 leaderelection.go:248] attempting to acquire leader lease openshift-ingress-node-firewall/d902e78d.ingress-nodefw...
1.6673120787869985e+09 INFO controller-runtime.certwatcher Updated current TLS certificate
1.6673120787871494e+09 INFO controller-runtime.webhook Serving webhook server {"host": "", "port": 9443}
1.6673120787871642e+09 INFO controller-runtime.certwatcher Starting certificate watcher
1.6673120901744297e+09 DEBUG controller-runtime.webhook.webhooks received request {"webhook": "/validate-ingressnodefirewall-openshift-io-v1alpha1-ingressnodefirewall", "UID": "4a6785ed-2eaa-4b55-88f6-18df7d93cb2e", "kind": "ingressnodefirewall.openshift.io/v1alpha1, Kind=IngressNodeFirewall", "resource": {"group":"ingressnodefirewall.openshift.io","version":"v1alpha1","resource":"ingressnodefirewalls"}}
1.667312090276091e+09 DEBUG controller-runtime.webhook.webhooks wrote response {"webhook": "/validate-ingressnodefirewall-openshift-io-v1alpha1-ingressnodefirewall", "code": 200, "reason": "", "UID": "4a6785ed-2eaa-4b55-88f6-18df7d93cb2e", "allowed": true}
1.6673120922811654e+09 DEBUG controller-runtime.webhook.webhooks received request {"webhook": "/validate-ingressnodefirewall-openshift-io-v1alpha1-ingressnodefirewall", "UID": "c8325fca-471a-4895-be9f-645f3cbfc1a2", "kind": "ingressnodefirewall.openshift.io/v1alpha1, Kind=IngressNodeFirewall", "resource": {"group":"ingressnodefirewall.openshift.io","version":"v1alpha1","resource":"ingressnodefirewalls"}}
1.6673120922814183e+09 DEBUG controller-runtime.webhook.webhooks wrote response {"webhook": "/validate-ingressnodefirewall-openshift-io-v1alpha1-ingressnodefirewall", "code": 422, "reason": "Invalid", "UID": "c8325fca-471a-4895-be9f-645f3cbfc1a2", "allowed": false}
1.6673120925292857e+09 DEBUG controller-runtime.webhook.webhooks received request {"webhook": "/validate-ingressnodefirewall-openshift-io-v1alpha1-ingressnodefirewall", "UID": "837f3f0a-c867-44d0-91c0-c0ec8aa5e41d", "kind": "ingressnodefirewall.openshift.io/v1alpha1, Kind=IngressNodeFirewall", "resource": {"group":"ingressnodefirewall.openshift.io","version":"v1alpha1","resource":"ingressnodefirewalls"}}
1.667312092529471e+09 DEBUG controller-runtime.webhook.webhooks wrote response {"webhook": "/validate-ingressnodefirewall-openshift-io-v1alpha1-ingressnodefirewall", "code": 422, "reason": "Invalid", "UID": "837f3f0a-c867-44d0-91c0-c0ec8aa5e41d", "allowed": false}
I1101 14:14:55.470124 1 leaderelection.go:258] successfully acquired lease openshift-ingress-node-firewall/d902e78d.ingress-nodefw
1.6673120954701862e+09 DEBUG events ingress-node-firewall-controller-manager-645575b6dc-mppqf_112d2d68-eb5c-4ebc-973b-fa5de14306a2 became leader {"type": "Normal", "object": {"kind":"Lease","namespace":"openshift-ingress-node-firewall","name":"d902e78d.ingress-nodefw","uid":"7717529b-aa21-4d19-8f8a-5d55e135395e","apiVersion":"coordination.k8s.io/v1","resourceVersion":"71122"}, "reason": "LeaderElection"}
1.6673120954708917e+09 INFO Starting EventSource {"controller": "ingressnodefirewall", "controllerGroup": "ingressnodefirewall.openshift.io", "controllerKind": "IngressNodeFirewall", "source": "kind source: *v1alpha1.IngressNodeFirewall"}
1.6673120954709456e+09 INFO Starting EventSource {"controller": "ingressnodefirewall", "controllerGroup": "ingressnodefirewall.openshift.io", "controllerKind": "IngressNodeFirewall", "source": "kind source: *v1.Node"}
1.6673120954709525e+09 INFO Starting EventSource {"controller": "ingressnodefirewall", "controllerGroup": "ingressnodefirewall.openshift.io", "controllerKind": "IngressNodeFirewall", "source": "kind source: *v1alpha1.IngressNodeFirewallNodeState"}
1.6673120954709566e+09 INFO Starting Controller {"controller": "ingressnodefirewall", "controllerGroup": "ingressnodefirewall.openshift.io", "controllerKind": "IngressNodeFirewall"}
1.6673120954709954e+09 INFO Starting EventSource {"controller": "ingressnodefirewallconfig", "controllerGroup": "ingressnodefirewall.openshift.io", "controllerKind": "IngressNodeFirewallConfig", "source": "kind source: *v1alpha1.IngressNodeFirewallConfig"}
1.6673120954710479e+09 INFO Starting EventSource {"controller": "ingressnodefirewallconfig", "controllerGroup": "ingressnodefirewall.openshift.io", "controllerKind": "IngressNodeFirewallConfig", "source": "kind source: *v1.DaemonSet"}
1.6673120954710531e+09 INFO Starting Controller {"controller": "ingressnodefirewallconfig", "controllerGroup": "ingressnodefirewall.openshift.io", "controllerKind": "IngressNodeFirewallConfig"}
1.6673120955723932e+09 INFO Starting workers {"controller": "ingressnodefirewall", "controllerGroup": "ingressnodefirewall.openshift.io", "controllerKind": "IngressNodeFirewall", "worker count": 1}
1.6673120955724514e+09 INFO Starting workers {"controller": "ingressnodefirewallconfig", "controllerGroup": "ingressnodefirewall.openshift.io", "controllerKind": "IngressNodeFirewallConfig", "worker count": 1}
1.667312095572532e+09 INFO controllers.IngressNodeFirewall Getting all IngressNodeFirewallNodeState objects in namespace {"req.Name": "e2e-disruption", "r.Namespace": "openshift-ingress-node-firewall"}
1.6673120955726008e+09 INFO controllers.IngressNodeFirewall Getting all IngressNodeFirewall objects {"req.Name": "e2e-disruption"}
1.667312095572617e+09 INFO controllers.IngressNodeFirewall Building the desired node state specs {"req.Name": "e2e-disruption"}
1.6673120955726242e+09 INFO controllers.IngressNodeFirewall Existing object not found in desired list, triggering deletion {"req.Name": "e2e-disruption"}
2022/11/01 14:15:39 http: TLS handshake error from 10.129.0.28:36308: remote error: tls: bad certificate
2022/11/01 14:15:40 http: TLS handshake error from 10.129.0.28:36316: remote error: tls: bad certificate
from ingress-node-firewall.
martinkennelly
commented on August 15, 2024
Encountered this again today when performing the reboot tests on OCP. Webhook become nonfunctional.
from ingress-node-firewall.
msherif1234
commented on August 15, 2024
@martinkennelly what will be the easiest way for me to repro this so I can debug it ?
from ingress-node-firewall.
martinkennelly
commented on August 15, 2024
I dont have steps to reproduce. Last time, I saw it was when I rebooted the node. Maybe try that.
from ingress-node-firewall.
openshift-bot
commented on August 15, 2024
Issues go stale after 90d of inactivity.
Mark the issue as fresh by commenting /remove-lifecycle stale.
Stale issues rot after an additional 30d of inactivity and eventually close.
Exclude this issue from closing by commenting /lifecycle frozen.
If this issue is safe to close now please do so with /close.
/lifecycle stale
from ingress-node-firewall.
msherif1234
commented on August 15, 2024
/remove-lifecycle stale
from ingress-node-firewall.
Related Issues (20)
- remove ebpf generated .o files from github HOT 1
- webhook overlapping order is broken HOT 3
- Should we have a INF status that identifies obj application is pending? HOT 10
- user should be able to configure 0.0.0.0/0 deny all rule
- Mixing ICMP v4 and v6 config causes a panic HOT 2
- I saw "could not attach XDP program: create link: device or resource busy" once HOT 2
- SCTP tests dont execute due to unknown issue capturing netcat stdout HOT 12
- Incorrect spec.interface name defined causes daemon to stop applying additional INF policies HOT 1
- Daemon doesnt remove INF policy HOT 2
- recent failures when running E2E on KinD HOT 6
- Test improvement: switch bpf-mounter daemonset image to a smaller image HOT 1
- PR #238 is continuously failing e2e HOT 1
- RFE: allow blocking the SSH port HOT 5
- e2e ci on OCP is recently broken need investigation KinD run is fine
- sync OWNERS HOT 1
- ci e2e test is very flaky HOT 1
- Support for setting rules to specific routes/namespaces? HOT 11
- Configuration is permitted when interfaces is missing from INF object HOT 7
- Future Release Branches Frozen For Merging | branch:release-4.18
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from ingress-node-firewall.