{"action":"created","issue":{"url":"https://api.github.com/repos/juju-solutions/bundle-canonical-kubernetes/issues/508","repository_url":"https://api.github.com/repos/juju-solutions/bundle-canonical-kubernetes","labels_url":"https://api.github.com/repos/juju-solutions/bundle-canonical-kubernetes/issues/508/labels{/name}","comments_url":"https://api.github.com/repos/juju-solutions/bundle-canonical-kubernetes/issues/508/comments","events_url":"https://api.github.com/repos/juju-solutions/bundle-canonical-kubernetes/issues/508/events","html_url":"https://github.com/juju-solutions/bundle-canonical-kubernetes/issues/508","id":303734673,"number":508,"title":"easyrsa installation stuck on maas cloud","user":{"login":"marfrit","id":37203914,"avatar_url":"https://avatars3.githubusercontent.com/u/37203914?v=4","gravatar_id":"","url":"https://api.github.com/users/marfrit","html_url":"https://github.com/marfrit","followers_url":"https://api.github.com/users/marfrit/followers","following_url":"https://api.github.com/users/marfrit/following{/other_user}","gists_url":"https://api.github.com/users/marfrit/gists{/gist_id}","starred_url":"https://api.github.com/users/marfrit/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/marfrit/subscriptions","organizations_url":"https://api.github.com/users/marfrit/orgs","repos_url":"https://api.github.com/users/marfrit/repos","events_url":"https://api.github.com/users/marfrit/events{/privacy}","received_events_url":"https://api.github.com/users/marfrit/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2018-03-09T06:08:04Z","updated_at":"2018-03-09T12:12:30Z","closed_at":null,"author_association":"NONE","body":"```\r\nmfritsche@hawking:~$ juju status\r\nModel                        Controller                     Cloud/Region    Version  SLA\r\nconjure-kubernetes-core-831  conjure-up-cloud-maas-3a7-f3f  cloud-maas-3a7  2.3.3    unsupported\r\n\r\nApp                Version  Status       Scale  Charm              Store       Rev  OS      Notes\r\neasyrsa                     waiting        0/1  easyrsa            jujucharms   33  ubuntu  \r\netcd               2.3.8    blocked          1  etcd               jujucharms   74  ubuntu  \r\nflannel            0.9.1    blocked          2  flannel            jujucharms   50  ubuntu  \r\nkubernetes-master  1.9.3    maintenance      1  kubernetes-master  jujucharms   97  ubuntu  exposed\r\nkubernetes-worker  1.9.3    waiting          1  kubernetes-worker  jujucharms  106  ubuntu  exposed\r\n\r\nUnit                  Workload     Agent       Machine  Public address  Ports  Message\r\neasyrsa/0             waiting      allocating  1/lxd/0                         waiting for machine\r\netcd/0*               blocked      idle        1        192.168.89.63          Missing relation to certificate authority.\r\nkubernetes-master/0*  maintenance  idle        1        192.168.89.63          Rendering authentication templates.\r\n  flannel/0           blocked      idle                 192.168.89.63          Waiting for etcd relation.\r\nkubernetes-worker/0*  waiting      idle        0        192.168.89.64          Waiting for cluster DNS.\r\n  flannel/1*          blocked      idle                 192.168.89.64          Waiting for etcd relation.\r\n\r\nMachine  State    DNS            Inst id              Series  AZ       Message\r\n0        started  192.168.89.64  cytqek               xenial  default  Deployed\r\n1        started  192.168.89.63  wfxe34               xenial  default  Deployed\r\n1/lxd/0  pending                 juju-ad779b-1-lxd-0  xenial  default  Container started\r\n\r\nRelation provider                    Requirer                             Interface         Type         Message\r\neasyrsa:client                       etcd:certificates                    tls-certificates  regular      \r\neasyrsa:client                       kubernetes-master:certificates       tls-certificates  regular      \r\neasyrsa:client                       kubernetes-worker:certificates       tls-certificates  regular      \r\netcd:cluster                         etcd:cluster                         etcd              peer         \r\netcd:db                              flannel:etcd                         etcd              regular      \r\netcd:db                              kubernetes-master:etcd               etcd              regular      \r\nkubernetes-master:cni                flannel:cni                          kubernetes-cni    subordinate  \r\nkubernetes-master:kube-api-endpoint  kubernetes-worker:kube-api-endpoint  http              regular      \r\nkubernetes-master:kube-control       kubernetes-worker:kube-control       kube-control      regular      \r\nkubernetes-worker:cni                flannel:cni                          kubernetes-cni    subordinate  \r\n\r\n```\r\nI didn't read up on apparmor yet; looks like the image installed and the lxd are interfering:\r\n\r\n```\r\njuju ssh 1\r\ndmesg | tail\r\n\r\n[   31.954155] audit_printk_skb: 18 callbacks suppressed\r\n[   31.954160] audit: type=1400 audit(1520575062.218:90): apparmor=\"DENIED\" operation=\"mkdir\" profile=\"snap.kube-apiserver.daemon\" name=\"/run/kubernetes/\" pid=3165 comm=\"kube-apiserver\" requested_mask=\"c\" denied_mask=\"c\" fsuid=0 ouid=0\r\n[   33.182497] audit: type=1400 audit(1520575063.446:91): apparmor=\"DENIED\" operation=\"mkdir\" profile=\"snap.kube-apiserver.daemon\" name=\"/run/kubernetes/\" pid=3327 comm=\"kube-apiserver\" requested_mask=\"c\" denied_mask=\"c\" fsuid=0 ouid=0\r\n[   34.951107] audit: type=1400 audit(1520575065.213:92): apparmor=\"DENIED\" operation=\"mkdir\" profile=\"snap.kube-apiserver.daemon\" name=\"/run/kubernetes/\" pid=3421 comm=\"kube-apiserver\" requested_mask=\"c\" denied_mask=\"c\" fsuid=0 ouid=0\r\n[   35.928563] audit: type=1400 audit(1520575066.189:93): apparmor=\"DENIED\" operation=\"mkdir\" profile=\"snap.kube-apiserver.daemon\" name=\"/run/kubernetes/\" pid=3548 comm=\"kube-apiserver\" requested_mask=\"c\" denied_mask=\"c\" fsuid=0 ouid=0\r\n[   36.764949] audit: type=1400 audit(1520575067.025:94): apparmor=\"DENIED\" operation=\"mkdir\" profile=\"snap.kube-apiserver.daemon\" name=\"/run/kubernetes/\" pid=3619 comm=\"kube-apiserver\" requested_mask=\"c\" denied_mask=\"c\" fsuid=0 ouid=0\r\n[   41.229644] br-enp0s3: port 2(veth9718FG) entered forwarding state\r\n\r\n```\r\n"},"comment":{"url":"https://api.github.com/repos/juju-solutions/bundle-canonical-kubernetes/issues/comments/371796509","html_url":"https://github.com/juju-solutions/bundle-canonical-kubernetes/issues/508#issuecomment-371796509","issue_url":"https://api.github.com/repos/juju-solutions/bundle-canonical-kubernetes/issues/508","id":371796509,"user":{"login":"marfrit","id":37203914,"avatar_url":"https://avatars3.githubusercontent.com/u/37203914?v=4","gravatar_id":"","url":"https://api.github.com/users/marfrit","html_url":"https://github.com/marfrit","followers_url":"https://api.github.com/users/marfrit/followers","following_url":"https://api.github.com/users/marfrit/following{/other_user}","gists_url":"https://api.github.com/users/marfrit/gists{/gist_id}","starred_url":"https://api.github.com/users/marfrit/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/marfrit/subscriptions","organizations_url":"https://api.github.com/users/marfrit/orgs","repos_url":"https://api.github.com/users/marfrit/repos","events_url":"https://api.github.com/users/marfrit/events{/privacy}","received_events_url":"https://api.github.com/users/marfrit/received_events","type":"User","site_admin":false},"created_at":"2018-03-09T12:12:30Z","updated_at":"2018-03-09T12:12:30Z","author_association":"NONE","body":"[results-2018-03-09-12-38-22.tar.gz](https://github.com/juju-solutions/bundle-canonical-kubernetes/files/1796809/results-2018-03-09-12-38-22.tar.gz)\r\nI did create a new install since I had to destroy the previous one, but that's the tarball for the same state."}}
{"actor":{"display_login":"marfrit"}}