validatedpatterns / multicluster-devsecops Goto Github PK
View Code? Open in Web Editor NEWLicense: Apache License 2.0
multicluster-devsecops's People
Contributors
![dependabot[bot] avatar](https://avatars.githubusercontent.com/in/29110?v=4 "dependabot[bot]")
Stargazers
Watchers
Forkers
ipbabble mbaldessari jchraibi gmidha fduthilleul gmidha1 sifa171 steven-ellis css-qe mikes429 day0hero csagan ascerra dlbewley tom-stockwell lpanza migbuen44 waynedovey wolfganghuse jesse-gonzalez sergiubodiu validatedpatterns-sandbox raffaelespazzoli mattlevan-px bkemp masalowitz chrismulderza ebatshi seeknruin jesseagonzalez waiweng walidshaari slallemand m4reshal nholguinrh glamperi boogiespook redhatnordicssa claudiol gmodzelewski knightride12 arisanch hvanniek anusharm sgnconnects msasso-rh joecharles33 albertina777 mhjacks horantj gparvin anyaegbufrancis rhecosystemappeng adrianhammond dwinchell mlabonte-rhmulticluster-devsecops's Issues
Sync conflict between multiclusterhub-operator and opp-policy ArgoCD Application
There is a sync conflict between these two objects since the multiclusterhub-operator tries to add the "acm" ConsolePlugin while the "opp-policy" Application in ArgoCD tries to leave just the "odf-console" one
Here is the ArgoCD Application's Manifest for reference:
---
apiVersion: operator.openshift.io/v1
kind: Console
metadata:
labels:
argocd.argoproj.io/instance: opp-policy
name: cluster
spec:
plugins:
- odf-console
Here are the operator logs:
1.6750967510576084e+09 INFO Reconciling MultiClusterHub {"controller": "multiclusterhub", "controllerGroup": "operator.open-cluster-management.io", "controllerKind": "MultiClusterHub", "multiClusterHub": {"name":"multiclusterhub","namespace":"open-cluster-management"}, "namespace": "open-cluster-management", "name": "multiclusterhub", "reconcileID": "dfe729cc-f136-4936-9a62-824397619e25"}
1.6750967510667846e+09 INFO controller_multiclusterhub Found image overrides from environment variables set by operand image prefix
1.6750967516626077e+09 INFO Reconciling MultiClusterHub {"controller": "multiclusterhub", "controllerGroup": "operator.open-cluster-management.io", "controllerKind": "MultiClusterHub", "multiClusterHub": {"name":"multiclusterhub","namespace":"open-cluster-management"}, "namespace": "open-cluster-management", "name": "multiclusterhub", "reconcileID": "dfe729cc-f136-4936-9a62-824397619e25"}
1.6750967517205005e+09 INFO Ensuring namespace: multicluster-engine {"controller": "multiclusterhub", "controllerGroup": "operator.open-cluster-management.io", "controllerKind": "MultiClusterHub", "multiClusterHub": {"name":"multiclusterhub","namespace":"open-cluster-management"}, "namespace": "open-cluster-management", "name": "multiclusterhub", "reconcileID": "dfe729cc-f136-4936-9a62-824397619e25"}
1.6750967517205572e+09 INFO Ensuring operator group exists in ns: multicluster-engine {"controller": "multiclusterhub", "controllerGroup": "operator.open-cluster-management.io", "controllerKind": "MultiClusterHub", "multiClusterHub": {"name":"multiclusterhub","namespace":"open-cluster-management"}, "namespace": "open-cluster-management", "name": "multiclusterhub", "reconcileID": "dfe729cc-f136-4936-9a62-824397619e25"}
1.6750967517205713e+09 INFO Ensuring OLM multicluster-engine/multicluster-engine subscription {"controller": "multiclusterhub", "controllerGroup": "operator.open-cluster-management.io", "controllerKind": "MultiClusterHub", "multiClusterHub": {"name":"multiclusterhub","namespace":"open-cluster-management"}, "namespace": "open-cluster-management", "name": "multiclusterhub", "reconcileID": "dfe729cc-f136-4936-9a62-824397619e25"}
1.675096751740915e+09 INFO Lets preserve that namespace! {"controller": "multiclusterhub", "controllerGroup": "operator.open-cluster-management.io", "controllerKind": "MultiClusterHub", "multiClusterHub": {"name":"multiclusterhub","namespace":"open-cluster-management"}, "namespace": "open-cluster-management", "name": "multiclusterhub", "reconcileID": "dfe729cc-f136-4936-9a62-824397619e25"}
1.6750967517757106e+09 INFO MCH Current Version: '2.6.3', Desired Version: '2.6.3' {"controller": "multiclusterhub", "controllerGroup": "operator.open-cluster-management.io", "controllerKind": "MultiClusterHub", "multiClusterHub": {"name":"multiclusterhub","namespace":"open-cluster-management"}, "namespace": "open-cluster-management", "name": "multiclusterhub", "reconcileID": "dfe729cc-f136-4936-9a62-824397619e25"}
1.6750967517757683e+09 INFO Checking if current version is 2.6 {"controller": "multiclusterhub", "controllerGroup": "operator.open-cluster-management.io", "controllerKind": "MultiClusterHub", "multiClusterHub": {"name":"multiclusterhub","namespace":"open-cluster-management"}, "namespace": "open-cluster-management", "name": "multiclusterhub", "reconcileID": "dfe729cc-f136-4936-9a62-824397619e25"}
1.6750967517757752e+09 INFO Checking if desired version is 2.6 {"controller": "multiclusterhub", "controllerGroup": "operator.open-cluster-management.io", "controllerKind": "MultiClusterHub", "multiClusterHub": {"name":"multiclusterhub","namespace":"open-cluster-management"}, "namespace": "open-cluster-management", "name": "multiclusterhub", "reconcileID": "dfe729cc-f136-4936-9a62-824397619e25"}
1.6750967517757795e+09 INFO isACM26x=true, isUpgrade=false {"controller": "multiclusterhub", "controllerGroup": "operator.open-cluster-management.io", "controllerKind": "MultiClusterHub", "multiClusterHub": {"name":"multiclusterhub","namespace":"open-cluster-management"}, "namespace": "open-cluster-management", "name": "multiclusterhub", "reconcileID": "dfe729cc-f136-4936-9a62-824397619e25"}
1.6750967517757983e+09 INFO MCE current version '2.1.4', MCE desired version '2.1.4' {"controller": "multiclusterhub", "controllerGroup": "operator.open-cluster-management.io", "controllerKind": "MultiClusterHub", "multiClusterHub": {"name":"multiclusterhub","namespace":"open-cluster-management"}, "namespace": "open-cluster-management", "name": "multiclusterhub", "reconcileID": "dfe729cc-f136-4936-9a62-824397619e25"}
1.6750967517758012e+09 INFO Checking MCE current version {"controller": "multiclusterhub", "controllerGroup": "operator.open-cluster-management.io", "controllerKind": "MultiClusterHub", "multiClusterHub": {"name":"multiclusterhub","namespace":"open-cluster-management"}, "namespace": "open-cluster-management", "name": "multiclusterhub", "reconcileID": "dfe729cc-f136-4936-9a62-824397619e25"}
1.675096751775806e+09 INFO MultiClusterEngine version '2.1.4' does not need to be updated {"controller": "multiclusterhub", "controllerGroup": "operator.open-cluster-management.io", "controllerKind": "MultiClusterHub", "multiClusterHub": {"name":"multiclusterhub","namespace":"open-cluster-management"}, "namespace": "open-cluster-management", "name": "multiclusterhub", "reconcileID": "dfe729cc-f136-4936-9a62-824397619e25"}
1.675096751775812e+09 INFO using trust bundle configmap open-cluster-management/trusted-ca-bundle {"controller": "multiclusterhub", "controllerGroup": "operator.open-cluster-management.io", "controllerKind": "MultiClusterHub", "multiClusterHub": {"name":"multiclusterhub","namespace":"open-cluster-management"}, "namespace": "open-cluster-management", "name": "multiclusterhub", "reconcileID": "dfe729cc-f136-4936-9a62-824397619e25"}
1.6750967526264307e+09 INFO Dynamic plugins are supported. Adding ACM plugin to console {"controller": "multiclusterhub", "controllerGroup": "operator.open-cluster-management.io", "controllerKind": "MultiClusterHub", "multiClusterHub": {"name":"multiclusterhub","namespace":"open-cluster-management"}, "namespace": "open-cluster-management", "name": "multiclusterhub", "reconcileID": "dfe729cc-f136-4936-9a62-824397619e25"}
1.6750967526264775e+09 INFO Ready to add plugin {"controller": "multiclusterhub", "controllerGroup": "operator.open-cluster-management.io", "controllerKind": "MultiClusterHub", "multiClusterHub": {"name":"multiclusterhub","namespace":"open-cluster-management"}, "namespace": "open-cluster-management", "name": "multiclusterhub", "reconcileID": "dfe729cc-f136-4936-9a62-824397619e25"}
1.6750967526500366e+09 INFO Added acm consoleplugin to console {"controller": "multiclusterhub", "controllerGroup": "operator.open-cluster-management.io", "controllerKind": "MultiClusterHub", "multiClusterHub": {"name":"multiclusterhub","namespace":"open-cluster-management"}, "namespace": "open-cluster-management", "name": "multiclusterhub", "reconcileID": "dfe729cc-f136-4936-9a62-824397619e25"}
imperative cronjob on hub cluster continuously fails to find ansible playbook - on-hub-get-regional-ca.yml
In Cluster Argocd on Hub - I noticed that there were multiple jobs failing (below) in multicluster-devsecops-hub application and in looking at logs (below), it seems to be failing to find ansible/playbooks/on-hub-get-regional-ca.yml
$ stern imperative
+ imperative-cronjob-27981750-k2jh2 › git-init
imperative-cronjob-27981750-k2jh2 git-init Cloning into '/git/repo'...
- imperative-cronjob-27981750-k2jh2 › git-init
+ imperative-cronjob-27981750-k2jh2 › regional-ca
imperative-cronjob-27981750-k2jh2 regional-ca ERROR! the playbook: ansible/playbooks/on-hub-get-regional-ca.yml could not be found
- imperative-cronjob-27981750-k2jh2 › regional-ca
after some quick debugging - it seems that the actual path of the file should be relative to common/ansible/... path
$ oc debug po/imperative-cronjob-27981800-6vbq4 -c regional-ca -- ls common/ansible/playbooks/acm
Starting pod/imperative-cronjob-27981800-6vbq4-debug, command was: timeout 234 ansible-playbook -e @/values/values.yaml ansible/playbooks/acm/acmhub-get-ca.yaml
acmhub-get-ca.yaml
Removing debug pod ...
so after changing values-hub.yaml to:
imperative:
jobs:
- name: regional-ca
playbook: common/ansible/playbooks/acm/acmhub-get-ca.yaml
...
job ran through "successfully"...
$ stern imperative
+ imperative-cronjob-27981810-rskmw › regional-ca
imperative-cronjob-27981810-rskmw regional-ca
imperative-cronjob-27981810-rskmw regional-ca PLAY [localhost] ***************************************************************
imperative-cronjob-27981810-rskmw regional-ca
imperative-cronjob-27981810-rskmw regional-ca TASK [Find hub cluster] ********************************************************
imperative-cronjob-27981810-rskmw regional-ca ok: [localhost]
imperative-cronjob-27981810-rskmw regional-ca
imperative-cronjob-27981810-rskmw regional-ca TASK [Get hub cluster facts] ***************************************************
imperative-cronjob-27981810-rskmw regional-ca ok: [localhost]
imperative-cronjob-27981810-rskmw regional-ca
imperative-cronjob-27981810-rskmw regional-ca TASK [Set CA fact] *************************************************************
imperative-cronjob-27981810-rskmw regional-ca ok: [localhost]
imperative-cronjob-27981810-rskmw regional-ca
imperative-cronjob-27981810-rskmw regional-ca TASK [Create secret with managed cluster's CA] *********************************
imperative-cronjob-27981810-rskmw regional-ca changed: [localhost]
imperative-cronjob-27981810-rskmw regional-ca
imperative-cronjob-27981810-rskmw regional-ca PLAY RECAP *********************************************************************
imperative-cronjob-27981810-rskmw regional-ca localhost : ok=4 changed=1 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0
imperative-cronjob-27981810-rskmw regional-ca
- imperative-cronjob-27981810-rskmw › regional-ca
I'm assuming that this is solution and can update via PR if preferred, but wanted to capture findings first...
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.