[caasp-beta] Problem adding additional node to cluster after 24h

[Carsten Duch]

Hi all,
I recently installed CaaSP 4 with a customer.
We tried to add another worker node after >24h to the cluster.
But skuba failed to deploy the node.

After we found out how to set debug level in skuba, we found out that this might be related to an existing issue on github:
https://github.com/kubernetes/kubeadm/issues/1310

This is the debug output we got:

I0718 19:19:52.762272   12629 ssh.go:190] stdout | [preflight] Running pre-flight checks

I0718 19:19:52.889960   12629 ssh.go:190] stdout | [preflight] Reading configuration from the cluster...

I0718 19:19:52.890010   12629 ssh.go:190] stdout | [preflight] FYI: You can look at this config file with 'kubectl -n kube-system get cm kubeadm-config -oyaml'

I0718 19:19:53.043975   12629 ssh.go:190] stdout | [kubelet-start] Downloading configuration for the kubelet from the "kubelet-config-1.15" ConfigMap in the kube-system namespace

I0718 19:19:53.372300   12629 ssh.go:190] stderr | error execution phase kubelet-start: configmaps "kubelet-config-1.15" is forbidden: User "system:bootstrap:pwupeo" cannot get resource "configmaps" in API group "" in the namespace "kube-system"

I0718 19:19:53.373248   12629 ssh.go:167] running command: "rm /tmp/kubeadm-init.conf"

[join] failed to apply join to node failed to apply state kubeadm.join: Process exited with status 1

F0718 19:19:53.402383   12629 join.go:49] error joining node s030v0302: failed to apply state kubeadm.join: Process exited with status 1

Is this a bug in skuba? Looks like it's required to reissue a token for kubeadm after 24h, I am unsure if skuba does this automatically or not.



Mit freundlichem Gruß / Best regards

Carsten Duch
Sales Engineer

SUSE Software Solutions Germany GmbH
Maxfeldstr. 5
90409 Nürnberg

(P)+49 173 5876 707
carsten.duch at suse.com<mailto:carsten.duch at suse.com>

--
SUSE Linux GmbH, GF: Felix Imendörffer, Jane Smithard, Graham Norton, HRB 21284 (AG Nürnberg)

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.suse.com/pipermail/caasp-beta/attachments/20190719/79213c03/attachment.html>