{"action":"opened","issue":{"url":"https://api.github.com/repos/openshift/origin/issues/21421","repository_url":"https://api.github.com/repos/openshift/origin","labels_url":"https://api.github.com/repos/openshift/origin/issues/21421/labels{/name}","comments_url":"https://api.github.com/repos/openshift/origin/issues/21421/comments","events_url":"https://api.github.com/repos/openshift/origin/issues/21421/events","html_url":"https://github.com/openshift/origin/issues/21421","id":377144678,"node_id":"MDU6SXNzdWUzNzcxNDQ2Nzg=","number":21421,"title":"kibana pod is CrashLoopBackOff in okd 3.11 deployment","user":{"login":"yuanlinios","id":2776448,"node_id":"MDQ6VXNlcjI3NzY0NDg=","avatar_url":"https://avatars1.githubusercontent.com/u/2776448?v=4","gravatar_id":"","url":"https://api.github.com/users/yuanlinios","html_url":"https://github.com/yuanlinios","followers_url":"https://api.github.com/users/yuanlinios/followers","following_url":"https://api.github.com/users/yuanlinios/following{/other_user}","gists_url":"https://api.github.com/users/yuanlinios/gists{/gist_id}","starred_url":"https://api.github.com/users/yuanlinios/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/yuanlinios/subscriptions","organizations_url":"https://api.github.com/users/yuanlinios/orgs","repos_url":"https://api.github.com/users/yuanlinios/repos","events_url":"https://api.github.com/users/yuanlinios/events{/privacy}","received_events_url":"https://api.github.com/users/yuanlinios/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-11-04T11:46:52Z","updated_at":"2018-11-04T11:46:52Z","closed_at":null,"author_association":"NONE","body":"<!--\r\nNote that this is the issue tracker for OpenShift Origin.\r\n\r\nOpenShift Installer issues should be reported at https://github.com/openshift/openshift-ansible/issues\r\nManagement Console issues are collected at https://github.com/openshift/origin-web-console/issues\r\nDocumentation issues are better reported at https://github.com/openshift/openshift-docs/issues\r\n-->\r\n\r\nkibana-proxy container fails after cluster deployment\r\n\r\n##### Version\r\n```\r\noc version\r\noc v3.11.0+aeff40b-47\r\nkubernetes v1.11.0+d4cacc0\r\nfeatures: Basic-Auth GSSAPI Kerberos SPNEGO\r\n\r\nServer https://master-blue.lab.local:443\r\nopenshift v3.11.0+aeff40b-47\r\nkubernetes v1.11.0+d4cacc0\r\n```\r\n\r\n##### Steps To Reproduce\r\n1. deploy okd 3.11\r\n2. after the cluster deployment is finished, check pod status by \"oc get pod -n openshift-logging\" \r\n\r\n##### Current Result\r\n```\r\noc get all -n openshift-logging\r\n...\r\npod/logging-kibana-1-wgwkv`                    1/2       CrashLoopBackOff   6          10m\r\n```\r\n\r\n##### Expected Result\r\nthe logging-kibana pod should be up and running\r\n\r\n##### Additional Information\r\nFor openshift-ansible\r\n```\r\ngit describe\r\nopenshift-ansible-3.11.38-1-11-g34f507b\r\n```\r\n\r\nInventory for logging part\r\n```\r\nopenshift_logging_install_logging=yes\r\nopenshift_logging_purge_logging=true\r\nopenshift_logging_use_ops=false\r\nopenshift_logging_master_url=https://master-blue.lab.local\r\nopenshift_logging_master_public_url=https://openshift.berylcloud.net\r\nopenshift_logging_kibana_hostname=kibana.cloudapps.berylcloud.net\r\nopenshift_logging_es_cluster_size=1\r\nopenshift_logging_es_number_of_replicas=0\r\nopenshift_logging_es_number_of_shards=1\r\nopenshift_logging_es_memory_limit=4G\r\nopenshift_logging_curator_default_days=3\r\nopenshift_logging_fluentd_journal_read_from_head=false\r\nopenshift_logging_elasticsearch_image=docker.io/openshift/origin-logging-elasticsearch:v3.11\r\nopenshift_logging_curator_image=docker.io/openshift/origin-logging-curator:v3.11\r\nopenshift_logging_kibana_image=docker.io/openshift/origin-logging-kibana:v3.11\r\nopenshift_logging_fluentd_image=docker.io/openshift/origin-logging-fluentd:v3.11\r\nopenshift_logging_kibana_proxy_image=docker.io/openshift/origin-logging-auth-proxy:v3.11\r\n\r\n```\r\n\r\nLogs from the kibana-proxy container\r\n```\r\noc logs -c kibana-proxy pod/logging-kibana-1-wgwkv\r\n...\r\n+ BYTES_PER_MEG=1048576\r\n+ BYTES_PER_GIG=1073741824\r\n+ DEFAULT_MIN=67108864\r\n+ echo 268435456\r\n+ grep -qE ^([[:digit:]]+)([GgMm])?i?$\r\n+ echo 268435456\r\n+ grep -oE ^[[:digit:]]+\r\n+ num=268435456\r\n+ + grep -oE [GgMm]\r\necho 268435456\r\nUsing NODE_OPTIONS: '--max_old_space_size=128' Memory setting is in MB\r\n+ echo\r\n+ unit=\r\n+ num=134217728\r\n+ [  = G ]\r\n+ [  = g ]\r\n+ [  = M ]\r\n+ [  = m ]\r\n+ [ 134217728 -lt 67108864 ]\r\n+ export NODE_OPTIONS=--max_old_space_size=128\r\n+ cd /opt/openshift-auth-proxy\r\n+ echo Using NODE_OPTIONS: '--max_old_space_size=128' Memory setting is in MB\r\nRunning from directory: '/opt/openshift-auth-proxy'\r\n+ pwd\r\n+ echo Running from directory: '/opt/openshift-auth-proxy'\r\n+ exec node --max_old_space_size=128 openshift-auth-proxy.js\r\nUsage: openshift-auth-proxy.js [options]\r\n\r\nOptions:\r\n  --listen-port              Port to listen on                                                           [default: 3000]\r\n  --server-cert              Certificate file to use to listen for TLS                   [default: \"secret/server-cert\"]\r\n  --server-key               Key file to use to listen for TLS                            [default: \"secret/server-key\"]\r\n  --server-tlsopts-file      File containing JSON for proxy TLS options              [default: \"secret/server-tls.json\"]\r\n  --backend                  Backend to proxy requests to once authenticated\r\n  --use-backend-host-header  Change the host header to the backend URL                        [boolean] [default: false]\r\n  --backend-ca               CA certificate file for validating the backend connection TLS (if needed)\r\n                                                                                          [default: \"secret/backend-ca\"]\r\n  --client-cert              Client certificate file for mutual TLS to the backend URL (if needed)\r\n                                                                                         [default: \"secret/client-cert\"]\r\n  --client-key               Client key file for mutual TLS to the backend URL (if needed)[default: \"secret/client-key\"]\r\n  --auth-mode                Proxy auth mode    [choices: \"oauth2\", \"bearer\", \"mutual_tls\", \"dummy\"] [default: \"oauth2\"]\r\n  --mutual-tls-ca            CA cert file to use for validating TLS client certs under \"mutual_tls\" auth method\r\n                                                                                           [default: \"secret/mutual-ca\"]\r\n  --session-secret           File containing secret for encrypted session cookies under \"oauth2\" method\r\n                                                                                      [default: \"secret/session-secret\"]\r\n  --session-duration         Duration for encrypted session cookies                                   [default: 3600000]\r\n  --session-active-duration  Active duration for encrypted session cookies                             [default: 300000]\r\n  --session-ephemeral        Delete cookies on browser close                                   [boolean] [default: true]\r\n  --callback-url             OAuth callback URL                                    [default: \"/auth/openshift/callback\"]\r\n  --logout-redirect          URL to send user to after they log out from OAuth session                    [default: \"/\"]\r\n  --oauth-id                 OAuth client ID\r\n  --oauth-secret             File containing OAuth client secret                        [default: \"secret/oauth-secret\"]\r\n  --public-master-url        Public master address for redirecting clients to\r\n  --master-url               Internal master address proxy will authenticate against for oauth/bearer\r\n                                                          [default: \"https://kubernetes.default.svc.cluster.local:8443\"]\r\n  --master-ca                CA certificate(s) file to validate connection to the master   [default: \"secret/master-ca\"]\r\n  --transform                Transform name(s) to apply to the request/response after authentication [choices:\r\n                             \"user_header\", \"token_header\", \"none\"]                [default: \"user_header,token_header\"]\r\n  --user-header              Header for sending user name on the proxied request        [default: \"X-Proxy-Remote-User\"]\r\n  --trust-remote-user        Use the user-header from the proxied request (if set) as the user for the backend request.\r\n                                                                                                               [boolean]\r\n  --debug                    Show extra debug information at startup and during operations  [boolean] [default: \"False\"]\r\n  --user-token-cache-size    Determine the size of the cache for the user tokens                           [default: 10]\r\n  --help                     Show help                                                                         [boolean]\r\n\r\nAll of these parameters can be set via corresponding environment variables.\r\n\r\nERROR IN PARAMETERS:\r\nNo value specified for parameter backend\r\nNo value specified for oauth2 parameter oauth-id\r\nNo value specified for oauth2 parameter public-master-url\r\n```\r\n\r\nIt looks some environment variables are missing from the kibana pod deployment\r\n\r\n\r\n\r\n\r\n"}}
{"actor":{"display_login":"yuanlinios"}}