-
Notifications
You must be signed in to change notification settings - Fork 239
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Controller pod never gets created #360
Comments
Hi @jketcham, thanks for the detailed info. I agree, that is quite strange. Can you share with us the outputs of:
|
Thanks for the quick response! Sure enough, right away I see what the issue is. I'm using kustomize to manage the configs for my repo, and I forgot that I was adding a name prefix ( Just for reference, here is the outputs of those commands in case anyone is curious:
After fixing the name, the status for the ConfigConnector resource is healthy:
|
Great, thanks for sharing your findings with us @jketcham! I am glad to see that your issue has been resolved. |
Piggybacking on this issue but i am having the same issue
But can't see the controller pod start up. I have the
|
Adding additional information
|
For anyone else who comes across this similar issue - you need to manually create a
as soon as this is created the controller pod starts up in the Also keep in mind the default add on is From the crd description
|
Hey @shabbir-taulia, apologies for the late response, and I apologize for the trouble you had to go through. Yes I think there is an improvement we can make here to our installation docs to improve clarity. For what it's worth, we do document the need for |
Hello @jcanseco Maybe adding this step to the GKE add on installation might make it better to understand. Again, thank you for the response and the awesome project, was indeed a good learning experience getting it all setup and working. |
Describe the bug
I have installed ConfigConnector into my GKE cluster using the 'add-on' through the gcloud console UI (following the instructions on this page), and for some reason, the controller pod is never created (nor its service account
cnrm-controller-manager
), and I'm not sure what the proper steps to debug this are. I noticed this problem in the first place because nothing I was configuring using ConfigConnector was actually getting applied/created.When I run
kubectl wait -n cnrm-system --for=condition=Ready pod --all
to verify the installation (as described here), this is the output I get:I do have PodSecurityPolicy implemented on this cluster and I have taken steps to make sure cnrm components can run, but I'm not sure if I may have missed something for the controller. Is there any way I can verify the PSP is not preventing the controller from creating? There is no indication that the controller is trying to be created but is failing some validation.
Workload Identity has been enabled on my node pool, Kubernetes Engine Monitoring is enabled as well, and I have created a service account with the proper roles and 'workload identity user' role for config connector to use.
ConfigConnector Version
1.27.1
Kuberenetes version
1.16.15-gke.4300
To Reproduce
YAML snippets:
Any insight would be much appreciated! Thank you!
The text was updated successfully, but these errors were encountered: