kops: Multiple OpenStack providers throwing the same cluster creation errors

1. What kops version are you running? master

2. What Kubernetes version are you running? 1.11.7

3. What cloud provider are you using? openstack

4. What commands did you run? What is the simplest way to reproduce this issue? kops create cluster (see https://github.com/kubernetes/kops/blob/master/docs/tutorial/openstack.md)

5. What happened after the commands executed? Deploying kops on two different “OpenStack as a service” providers, both times I get the same errors:

  • executor.go:130] error running task “LBPool/api.dev.k8s.local-https” (9m30s remaining to succeed): error creating LB pool: Failed to create pool: Bad request with: [POST https://host/v2.0/lbaas/pools], error message: {“NeutronError”: {“message”: “Unrecognized attribute(s) ‘loadbalancer_id’”, “type”: “HTTPBadRequest”, “detail”: “”}}
  • executor.go:130] error running task “SecurityGroupRule/*openstacktasks.SecurityGroupRule {"ID":null,"Direction":"ingress","EtherType":"IPv4","SecGroup":{"ID":null,"Name":"masters.dev.k8s.local","Description":null,"Lifecycle":"Sync"},"PortRangeMin":53,"PortRangeMax":53,"Protocol":"udp","RemoteIPPrefix":null,"RemoteGroup":{"ID":null,"Name":"masters.dev.k8s.local","Description":null,"Lifecycle":"Sync"},"Lifecycle":"Sync"}” (6m1s remaining to succeed): found multiple SecurityGroupRules
  • executor.go:130] error running task “RouterInterface/ri-xxx-1” (5m47s remaining to succeed): Error creating router interface: error creating router interface: Resource not found

On a Devstack setup running on my laptop I did not see any errors, but ofcourse it was much too slow to ever become a healthy cluster 😉

I have specifically tried two different OpenStack providers, to ensure it’s not a provider specific issue.

/sig openstack /kind bug

About this issue

  • Original URL
  • State: closed
  • Created 5 years ago
  • Comments: 21 (9 by maintainers)

Most upvoted comments

@kciredor I have looked at the openstack cloud provider for Kubernetes and I appear to be creating both the client for neutron as well as the security group in an indistinguishable way. I don’t have much more to go on here. I would be curious if you’ve successfully used the manage-security-groups option in your current tooling with any success? https://github.com/kubernetes/cloud-provider-openstack/blob/master/pkg/cloudprovider/providers/openstack/openstack.go#L114