microshift: [BUG] Buidconfig did not work - can mount a bunch of default openshift ressources

Hi,

I tried to run a build on microshift and it failed. It might be possible a build make not sense on microshift but its for me the only to build an arm container image on my Pi4.

What happened:

$ oc describe builds/openshift-examples-1
...
Events:
  Type		Reason		Age			From			Message
  ----		------		----			----			-------
  Normal	Scheduled	66s			default-scheduler	Successfully assigned build-example/openshift-examples-1-build to microshift
  Warning	FailedMount	65s			kubelet			MountVolume.SetUp failed for volume "builder-dockercfg-trjjx-push" : failed to sync secret cache: timed out waiting for the condition
  Warning	FailedMount	65s			kubelet			MountVolume.SetUp failed for volume "builder-dockercfg-trjjx-pull" : failed to sync secret cache: timed out waiting for the condition
  Warning	FailedMount	65s			kubelet			MountVolume.SetUp failed for volume "build-ca-bundles" : failed to sync configmap cache: timed out waiting for the condition
  Warning	FailedMount	2s (x8 over 66s)	kubelet			MountVolume.SetUp failed for volume "node-pullsecrets" : hostPath type check failed: /var/lib/kubelet/config.json is not a file
  Warning	FailedMount	1s (x7 over 65s)	kubelet			MountVolume.SetUp failed for volume "build-ca-bundles" : configmap references non-existent config key: service-ca.crt

What you expected to happen:

Run build

How to reproduce it (as minimally and precisely as possible):

oc new-project build-example
oc apply -k https://github.com/openshift-examples/web-deployment.git/overlay/simple-build-deploy/

Anything else we need to know?:

Environment:

  • Microshift version (use microshift version):
MicroShift Version: 4.8.0-0.microshift-unknown
Base OKD Version: 4.8.0-0.okd-2021-10-10-030117
  • Hardware configuration: Pi4
  • OS (e.g: cat /etc/os-release):
NAME="Fedora Linux"
VERSION="35.20211212.1 (IoT Edition)"
ID=fedora
VERSION_ID=35
VERSION_CODENAME=""
PLATFORM_ID="platform:f35"
PRETTY_NAME="Fedora Linux 35.20211212.1 (IoT Edition)"
ANSI_COLOR="0;38;2;60;110;180"
LOGO=fedora-logo-icon
CPE_NAME="cpe:/o:fedoraproject:fedora:35"
HOME_URL="https://fedoraproject.org/"
DOCUMENTATION_URL="https://docs.fedoraproject.org/en-US/fedora/f35/system-administrators-guide/"
SUPPORT_URL="https://ask.fedoraproject.org/"
BUG_REPORT_URL="https://bugzilla.redhat.com/"
REDHAT_BUGZILLA_PRODUCT="Fedora"
REDHAT_BUGZILLA_PRODUCT_VERSION=35
REDHAT_SUPPORT_PRODUCT="Fedora"
REDHAT_SUPPORT_PRODUCT_VERSION=35
PRIVACY_POLICY_URL="https://fedoraproject.org/wiki/Legal:PrivacyPolicy"
VARIANT="IoT Edition"
VARIANT_ID=iot
OSTREE_VERSION='35.20211212.1'
  • Kernel (e.g. uname -a): Linux microshift 5.15.6-200.fc35.aarch64 #1 SMP Wed Dec 1 13:25:57 UTC 2021 aarch64 aarch64 aarch64 GNU/Linux
  • Others:

Relevant Logs

more details:
$ oc describe pods openshift-examples-1-build | tail
Events:
  Type     Reason       Age                  From               Message
  ----     ------       ----                 ----               -------
  Normal   Scheduled    2m20s                default-scheduler  Successfully assigned build-example/openshift-examples-1-build to microshift
  Warning  FailedMount  2m19s                kubelet            MountVolume.SetUp failed for volume "builder-dockercfg-trjjx-push" : failed to sync secret cache: timed out waiting for the condition
  Warning  FailedMount  2m19s                kubelet            MountVolume.SetUp failed for volume "builder-dockercfg-trjjx-pull" : failed to sync secret cache: timed out waiting for the condition
  Warning  FailedMount  2m19s                kubelet            MountVolume.SetUp failed for volume "build-ca-bundles" : failed to sync configmap cache: timed out waiting for the condition
  Warning  FailedMount  17s                  kubelet            Unable to attach or mount volumes: unmounted volumes=[node-pullsecrets build-ca-bundles], unattached volumes=[build-system-configs build-blob-cache kube-api-access-xgzmd node-pullsecrets builder-dockercfg-trjjx-push container-storage-root buildworkdir builder-dockercfg-trjjx-pull build-ca-bundles build-proxy-ca-bundles buildcachedir]: timed out waiting for the condition
  Warning  FailedMount  12s (x9 over 2m20s)  kubelet            MountVolume.SetUp failed for volume "node-pullsecrets" : hostPath type check failed: /var/lib/kubelet/config.json is not a file
  Warning  FailedMount  11s (x8 over 2m19s)  kubelet            MountVolume.SetUp failed for volume "build-ca-bundles" : configmap references non-existent config key: service-ca.crt

$ oc get pods  openshift-examples-1-build  -o yaml | grep -A70 volumes
  volumes:
  - hostPath:
      path: /var/lib/containers/cache
      type: ""
    name: buildcachedir
  - emptyDir: {}
    name: buildworkdir
  - hostPath:
      path: /var/lib/kubelet/config.json
      type: File
    name: node-pullsecrets
  - name: builder-dockercfg-trjjx-push
    secret:
      defaultMode: 384
      secretName: builder-dockercfg-trjjx
  - name: builder-dockercfg-trjjx-pull
    secret:
      defaultMode: 384
      secretName: builder-dockercfg-trjjx
  - configMap:
      defaultMode: 420
      name: openshift-examples-1-sys-config
    name: build-system-configs
  - configMap:
      defaultMode: 420
      items:
      - key: service-ca.crt
        path: certs.d//ca.crt
      name: openshift-examples-1-ca
    name: build-ca-bundles
  - configMap:
      defaultMode: 420
      items:
      - key: ca-bundle.crt
        path: tls-ca-bundle.pem
      name: openshift-examples-1-global-ca
    name: build-proxy-ca-bundles
  - emptyDir: {}
    name: container-storage-root
  - emptyDir: {}
    name: build-blob-cache
  - name: kube-api-access-xgzmd
    projected:
      defaultMode: 420
      sources:
      - serviceAccountToken:
          expirationSeconds: 3607
          path: token
      - configMap:
          items:
          - key: ca.crt
            path: ca.crt
          name: kube-root-ca.crt
      - downwardAPI:
          items:
          - fieldRef:
              apiVersion: v1
              fieldPath: metadata.namespace
            path: namespace
      - configMap:
          items:
          - key: service-ca.crt
            path: service-ca.crt
          name: openshift-service-ca.crt
status:
  conditions:
  - lastProbeTime: null
    lastTransitionTime: "2021-12-22T14:34:40Z"
    message: 'containers with incomplete status: [git-clone manage-dockerfile]'
    reason: ContainersNotInitialized
    status: "False"

About this issue

  • Original URL
  • State: closed
  • Created 3 years ago
  • Comments: 17 (13 by maintainers)

Most upvoted comments

Just for information:

$ oc new-project openshift-test
Error from server (Forbidden): project.project.openshift.io "openshift-test" is forbidden: cannot request a project starting with "openshift-"
$ oc adm new-project openshift-test
Created project openshift-test
$

oc adm is the key, for normal project requests names starting with openshift- is forbidden. But of course not for admins, they should know what they do.