microshift: [BUG] Buidconfig did not work - can mount a bunch of default openshift ressources
Hi,
I tried to run a build on microshift and it failed. It might be possible a build make not sense on microshift but its for me the only to build an arm container image on my Pi4.
What happened:
$ oc describe builds/openshift-examples-1
...
Events:
Type Reason Age From Message
---- ------ ---- ---- -------
Normal Scheduled 66s default-scheduler Successfully assigned build-example/openshift-examples-1-build to microshift
Warning FailedMount 65s kubelet MountVolume.SetUp failed for volume "builder-dockercfg-trjjx-push" : failed to sync secret cache: timed out waiting for the condition
Warning FailedMount 65s kubelet MountVolume.SetUp failed for volume "builder-dockercfg-trjjx-pull" : failed to sync secret cache: timed out waiting for the condition
Warning FailedMount 65s kubelet MountVolume.SetUp failed for volume "build-ca-bundles" : failed to sync configmap cache: timed out waiting for the condition
Warning FailedMount 2s (x8 over 66s) kubelet MountVolume.SetUp failed for volume "node-pullsecrets" : hostPath type check failed: /var/lib/kubelet/config.json is not a file
Warning FailedMount 1s (x7 over 65s) kubelet MountVolume.SetUp failed for volume "build-ca-bundles" : configmap references non-existent config key: service-ca.crt
What you expected to happen:
Run build
How to reproduce it (as minimally and precisely as possible):
oc new-project build-example
oc apply -k https://github.com/openshift-examples/web-deployment.git/overlay/simple-build-deploy/
Anything else we need to know?:
Environment:
- Microshift version (use
microshift version):
MicroShift Version: 4.8.0-0.microshift-unknown
Base OKD Version: 4.8.0-0.okd-2021-10-10-030117
- Hardware configuration:
Pi4 - OS (e.g:
cat /etc/os-release):
NAME="Fedora Linux"
VERSION="35.20211212.1 (IoT Edition)"
ID=fedora
VERSION_ID=35
VERSION_CODENAME=""
PLATFORM_ID="platform:f35"
PRETTY_NAME="Fedora Linux 35.20211212.1 (IoT Edition)"
ANSI_COLOR="0;38;2;60;110;180"
LOGO=fedora-logo-icon
CPE_NAME="cpe:/o:fedoraproject:fedora:35"
HOME_URL="https://fedoraproject.org/"
DOCUMENTATION_URL="https://docs.fedoraproject.org/en-US/fedora/f35/system-administrators-guide/"
SUPPORT_URL="https://ask.fedoraproject.org/"
BUG_REPORT_URL="https://bugzilla.redhat.com/"
REDHAT_BUGZILLA_PRODUCT="Fedora"
REDHAT_BUGZILLA_PRODUCT_VERSION=35
REDHAT_SUPPORT_PRODUCT="Fedora"
REDHAT_SUPPORT_PRODUCT_VERSION=35
PRIVACY_POLICY_URL="https://fedoraproject.org/wiki/Legal:PrivacyPolicy"
VARIANT="IoT Edition"
VARIANT_ID=iot
OSTREE_VERSION='35.20211212.1'
- Kernel (e.g.
uname -a):Linux microshift 5.15.6-200.fc35.aarch64 #1 SMP Wed Dec 1 13:25:57 UTC 2021 aarch64 aarch64 aarch64 GNU/Linux - Others:
Relevant Logs
more details:
$ oc describe pods openshift-examples-1-build | tail
Events:
Type Reason Age From Message
---- ------ ---- ---- -------
Normal Scheduled 2m20s default-scheduler Successfully assigned build-example/openshift-examples-1-build to microshift
Warning FailedMount 2m19s kubelet MountVolume.SetUp failed for volume "builder-dockercfg-trjjx-push" : failed to sync secret cache: timed out waiting for the condition
Warning FailedMount 2m19s kubelet MountVolume.SetUp failed for volume "builder-dockercfg-trjjx-pull" : failed to sync secret cache: timed out waiting for the condition
Warning FailedMount 2m19s kubelet MountVolume.SetUp failed for volume "build-ca-bundles" : failed to sync configmap cache: timed out waiting for the condition
Warning FailedMount 17s kubelet Unable to attach or mount volumes: unmounted volumes=[node-pullsecrets build-ca-bundles], unattached volumes=[build-system-configs build-blob-cache kube-api-access-xgzmd node-pullsecrets builder-dockercfg-trjjx-push container-storage-root buildworkdir builder-dockercfg-trjjx-pull build-ca-bundles build-proxy-ca-bundles buildcachedir]: timed out waiting for the condition
Warning FailedMount 12s (x9 over 2m20s) kubelet MountVolume.SetUp failed for volume "node-pullsecrets" : hostPath type check failed: /var/lib/kubelet/config.json is not a file
Warning FailedMount 11s (x8 over 2m19s) kubelet MountVolume.SetUp failed for volume "build-ca-bundles" : configmap references non-existent config key: service-ca.crt
$ oc get pods openshift-examples-1-build -o yaml | grep -A70 volumes
volumes:
- hostPath:
path: /var/lib/containers/cache
type: ""
name: buildcachedir
- emptyDir: {}
name: buildworkdir
- hostPath:
path: /var/lib/kubelet/config.json
type: File
name: node-pullsecrets
- name: builder-dockercfg-trjjx-push
secret:
defaultMode: 384
secretName: builder-dockercfg-trjjx
- name: builder-dockercfg-trjjx-pull
secret:
defaultMode: 384
secretName: builder-dockercfg-trjjx
- configMap:
defaultMode: 420
name: openshift-examples-1-sys-config
name: build-system-configs
- configMap:
defaultMode: 420
items:
- key: service-ca.crt
path: certs.d//ca.crt
name: openshift-examples-1-ca
name: build-ca-bundles
- configMap:
defaultMode: 420
items:
- key: ca-bundle.crt
path: tls-ca-bundle.pem
name: openshift-examples-1-global-ca
name: build-proxy-ca-bundles
- emptyDir: {}
name: container-storage-root
- emptyDir: {}
name: build-blob-cache
- name: kube-api-access-xgzmd
projected:
defaultMode: 420
sources:
- serviceAccountToken:
expirationSeconds: 3607
path: token
- configMap:
items:
- key: ca.crt
path: ca.crt
name: kube-root-ca.crt
- downwardAPI:
items:
- fieldRef:
apiVersion: v1
fieldPath: metadata.namespace
path: namespace
- configMap:
items:
- key: service-ca.crt
path: service-ca.crt
name: openshift-service-ca.crt
status:
conditions:
- lastProbeTime: null
lastTransitionTime: "2021-12-22T14:34:40Z"
message: 'containers with incomplete status: [git-clone manage-dockerfile]'
reason: ContainersNotInitialized
status: "False"
About this issue
- Original URL
- State: closed
- Created 3 years ago
- Comments: 17 (13 by maintainers)
Just for information:
oc admis the key, for normal project requests names starting withopenshift-is forbidden. But of course not for admins, they should know what they do.