This repository has been archived by the owner on Feb 12, 2024. It is now read-only.
[cetic/nifi] TLS Tookit issue #332
Comments
|
Finally I discovered the issue! values.yaml (before): auth:
admin: x@x.comvalues.yaml (after): auth:
admin: CN=admin, OU=NIFIBut now I'm facing another issue, so nodes can't connect to the cluster. |
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
Describe the bug
I'm trying to migrate from 0.7.8 to 1.2.0 and I'm getting TLS toolkit error
Kubernetes: 1.24 - AWS EKS
Nifi chart: 1.2.0 with Nifi 1.23.2
What happened:
[main] INFO org.apache.nifi.toolkit.tls.standalone.TlsToolkitStandalone - Successfully generated TLS configuration for app-nifi-nifi-0.app-nifi-nifi-headless.nifi.svc.cluster.local 1 in /opt/nifi/nifi-current/conf/app-nifi-nifi-0.app-nifi-nifi-headless.nifi.svc.cluster.local
Error generating TLS configuration. (badly formatted directory string)
usage: org.apache.nifi.toolkit.tls.TlsToolkitMain [-a ] [--additionalCACertificate ] [-B ] [-c ] [-C ] [-d ] [-f ] [-g] [-G
] [-h] [-k ] [-K ] [-n ] [--nifiDnPrefix ] [--nifiDnSuffix ] [-o ] [-O] [-P ] [-s ] [-S ]
[--splitKeystore ] [--subjectAlternativeNames ] [-T ]
Version of Helm, Kubernetes and the Nifi chart:
Helm version: version.BuildInfo{Version:"v3.11.0", GitCommit:"472c5736ab01133de504a826bd9ee12cbe4e7904", GitTreeState:"clean", GoVersion:"go1.18.10"}
What you expected to happen:
How to reproduce it (as minimally and precisely as possible):
Anything else we need to know:
Here are some information that help troubleshooting:
values.yamlor the changes made to the default one (after removing sensitive information)Check if a pod is in error:
Inspect the pod, check the "Events" section at the end for anything suspicious.
kubectl describe pod myrelease-nifi-0 Name: app-nifi-0 Namespace: nifi Priority: 0 Node: ip-10-99-9-30.ec2.internal/10.99.9.30 Start Time: Wed, 24 Jan 2024 17:10:02 -0300 Labels: app=nifi chart=nifi-1.2.1 controller-revision-hash=app-nifi-6f64799544 heritage=Helm release=app-nifi statefulset.kubernetes.io/pod-name=app-nifi-0 Annotations: kubernetes.io/psp: eks.privileged security.alpha.kubernetes.io/sysctls: net.ipv4.ip_local_port_range=10000 65000 Status: Running IP: 100.64.111.240 IPs: IP: 100.64.111.240 Controlled By: StatefulSet/app-nifi Init Containers: zookeeper: Container ID: containerd://3a128622e2a54b9fa1888b6e1410c32cb6ce08c0ad490d2c1b4357b4ceb4824a Image: busybox:1.32.0 Image ID: docker.io/library/busybox@sha256:bde48e1751173b709090c2539fdf12d6ba64e88ec7a4301591227ce925f3c678 Port: <none> Host Port: <none> Command: sh -c echo trying to contact app-nifi-zookeeper 2181 until nc -vzw 1 app-nifi-zookeeper 2181; do echo "waiting for zookeeper..." sleep 2 done State: Terminated Reason: Completed Exit Code: 0 Started: Wed, 24 Jan 2024 17:10:16 -0300 Finished: Wed, 24 Jan 2024 17:10:25 -0300 Ready: True Restart Count: 0 Environment: AWS_STS_REGIONAL_ENDPOINTS: regional AWS_DEFAULT_REGION: us-east-1 AWS_REGION: us-east-1 AWS_ROLE_ARN: arn:aws:iam::111111111111:role/nifi-dev AWS_WEB_IDENTITY_TOKEN_FILE: /var/run/secrets/eks.amazonaws.com/serviceaccount/token Mounts: /var/run/secrets/eks.amazonaws.com/serviceaccount from aws-iam-token (ro) /var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-kptf9 (ro) Containers: server: Container ID: containerd://4346715e9e8641175d7a1c4d86997166f81c800713e64684847ff145cd20fea5 Image: 111111111111.dkr.ecr.us-east-1.amazonaws.com/app-nifi:5ddbdde Image ID: 111111111111.dkr.ecr.us-east-1.amazonaws.com/app-nifi@sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa Ports: 8443/TCP, 6007/TCP Host Ports: 0/TCP, 0/TCP Command: bash -ce prop_replace () { target_file=${NIFI_HOME}/conf/${3:-nifi.properties} echo "updating ${1} in ${target_file}" if egrep "^${1}=" ${target_file} &> /dev/null; then sed -i -e "s|^$1=.*$|$1=$2|" ${target_file} else echo ${1}=${2} >> ${target_file} fi } mkdir -p ${NIFI_HOME}/config-data/conf FQDN=$(hostname -f) cat "${NIFI_HOME}/conf/nifi.temp" > "${NIFI_HOME}/conf/nifi.properties" prop_replace nifi.security.user.login.identity.provider '' prop_replace nifi.security.user.authorizer managed-authorizer prop_replace nifi.security.user.oidc.discovery.url https://keycloak-app.dev.domain.com/realms/nifi/.well-known/openid-configuration prop_replace nifi.security.user.oidc.client.id nifi-dev prop_replace nifi.security.user.oidc.client.secret superSecret prop_replace nifi.security.user.oidc.claim.identifying.user email xmlstarlet ed --inplace --delete "//authorizers/authorizer[identifier='single-user-authorizer']" "${NIFI_HOME}/conf/authorizers.xml" xmlstarlet ed --inplace --update "//authorizers/userGroupProvider/property[@name='Users File']" -v './auth-conf/users.xml' "${NIFI_HOME}/conf/authorizers.xml" xmlstarlet ed --inplace --delete "//authorizers/userGroupProvider/property[@name='Initial User Identity 1']" "${NIFI_HOME}/conf/authorizers.xml" xmlstarlet ed --inplace \ --subnode "authorizers/userGroupProvider" --type 'elem' -n 'property' \ --value "email@email.com" \ --insert "authorizers/userGroupProvider/property[not(@name)]" --type attr -n name \ --value "Initial User Identity 2" \ "${NIFI_HOME}/conf/authorizers.xml" xmlstarlet ed --inplace --update "//authorizers/accessPolicyProvider/property[@name='Initial Admin Identity']" -v "email@email.com" "${NIFI_HOME}/conf/authorizers.xml" xmlstarlet ed --inplace --update "//authorizers/accessPolicyProvider/property[@name='Authorizations File']" -v './auth-conf/authorizations.xml' "${NIFI_HOME}/conf/authorizers.xml" xmlstarlet ed --inplace --delete "authorizers/accessPolicyProvider/property[@name='Node Identity 1']" "${NIFI_HOME}/conf/authorizers.xml" xmlstarlet ed --inplace \ --subnode "authorizers/accessPolicyProvider" --type 'elem' -n 'property' \ --value "CN=app-nifi-0.app-nifi-headless.nifi.svc.cluster.local, OU=NIFI" \ --insert "authorizers/accessPolicyProvider/property[not(@name)]" --type attr -n name \ --value "Node Identity 0" \ "${NIFI_HOME}/conf/authorizers.xml" xmlstarlet ed --inplace \ --subnode "authorizers/userGroupProvider" --type 'elem' -n 'property' \ --value "CN=app-nifi-0.app-nifi-headless.nifi.svc.cluster.local, OU=NIFI" \ --insert "authorizers/userGroupProvider/property[not(@name)]" --type attr -n name \ --value "Initial User Identity 0" \ "${NIFI_HOME}/conf/authorizers.xml" xmlstarlet ed --inplace \ --subnode "authorizers/accessPolicyProvider" --type 'elem' -n 'property' \ --value "CN=app-nifi-1.app-nifi-headless.nifi.svc.cluster.local, OU=NIFI" \ --insert "authorizers/accessPolicyProvider/property[not(@name)]" --type attr -n name \ --value "Node Identity 1" \ "${NIFI_HOME}/conf/authorizers.xml" xmlstarlet ed --inplace \ --subnode "authorizers/userGroupProvider" --type 'elem' -n 'property' \ --value "CN=app-nifi-1.app-nifi-headless.nifi.svc.cluster.local, OU=NIFI" \ --insert "authorizers/userGroupProvider/property[not(@name)]" --type attr -n name \ --value "Initial User Identity 1" \ "${NIFI_HOME}/conf/authorizers.xml" if ! test -f /opt/nifi/data/flow.xml.gz && test -f /opt/nifi/data/flow.xml; then gzip /opt/nifi/data/flow.xml fi prop_replace nifi.ui.banner.text $(hostname -s) prop_replace nifi.remote.input.host ${FQDN} prop_replace nifi.cluster.node.address ${FQDN} prop_replace nifi.zookeeper.connect.string ${NIFI_ZOOKEEPER_CONNECT_STRING} prop_replace nifi.web.http.host ${FQDN} # Update nifi.properties for web ui proxy hostname prop_replace nifi.web.proxy.host nifi-app.dev.domain.com:8443 if [ ! -r "${NIFI_HOME}/conf/nifi-cert.pem" ] then /opt/nifi/nifi-toolkit-current/bin/tls-toolkit.sh standalone \ -n 'app-nifi-nifi-0.app-nifi-nifi-headless.nifi.svc.cluster.local' \ -C 'email@email.com' \ -o "${NIFI_HOME}/conf/" \ -P superSecret \ -S superSecret \ --nifiPropertiesFile /opt/nifi/nifi-current/conf/nifi.properties fi prop_replace nifi.web.http.network.interface.default "eth0" nifi.properties prop_replace nifi.web.http.network.interface.lo "lo" nifi.properties for f in "${NIFI_HOME}/conf/authorizers.xml" "${NIFI_HOME}/conf/login-identity-providers.xml" ${NIFI_HOME}/conf/nifi.properties do echo === $f === cat $f done echo === end of files === function prop () { target_file=${NIFI_HOME}/conf/nifi.properties egrep "^${1}=" ${target_file} | cut -d'=' -f2 } function offloadNode() { FQDN=$(hostname -f) echo "disconnecting node '$FQDN'" baseUrl=https://${FQDN}:8443 echo "keystoreType=$(prop nifi.security.keystoreType)" > secure.properties echo "keystore=$(prop nifi.security.keystore)" >> secure.properties echo "keystorePasswd=$(prop nifi.security.keystorePasswd)" >> secure.properties echo "truststoreType=$(prop nifi.security.truststoreType)" >> secure.properties echo "truststore=$(prop nifi.security.truststore)" >> secure.properties echo "truststorePasswd=$(prop nifi.security.truststorePasswd)" >> secure.properties echo "proxiedEntity=email@email.com" >> secure.properties secureArgs="-p secure.properties" echo baseUrl ${baseUrl} echo "gracefully disconnecting node '$FQDN' from cluster" ${NIFI_TOOLKIT_HOME}/bin/cli.sh nifi get-nodes -ot json -u ${baseUrl} ${secureArgs} > nodes.json nnid=$(jq --arg FQDN "$FQDN" '.cluster.nodes[] | select(.address==$FQDN) | .nodeId' nodes.json) echo "disconnecting node ${nnid}" ${NIFI_TOOLKIT_HOME}/bin/cli.sh nifi disconnect-node -nnid $nnid -u ${baseUrl} ${secureArgs} echo "" echo "get a connected node" connectedNode=$(jq -r 'first(.cluster.nodes|=sort_by(.address)| .cluster.nodes[] | select(.status=="CONNECTED")) | .address' nodes.json) baseUrl=https://${connectedNode}:8443 echo baseUrl ${baseUrl} echo "" echo "wait until node has state 'DISCONNECTED'" while [[ "${node_state}" != "DISCONNECTED" ]]; do sleep 1 ${NIFI_TOOLKIT_HOME}/bin/cli.sh nifi get-nodes -ot json -u ${baseUrl} ${secureArgs} > nodes.json node_state=$(jq -r --arg FQDN "$FQDN" '.cluster.nodes[] | select(.address==$FQDN) | .status' nodes.json) echo "state is '${node_state}'" done echo "" echo "node '${nnid}' was disconnected" echo "offloading node" ${NIFI_TOOLKIT_HOME}/bin/cli.sh nifi offload-node -nnid $nnid -u ${baseUrl} ${secureArgs} echo "" echo "wait until node has state 'OFFLOADED'" while [[ "${node_state}" != "OFFLOADED" ]]; do sleep 1 ${NIFI_TOOLKIT_HOME}/bin/cli.sh nifi get-nodes -ot json -u ${baseUrl} ${secureArgs} > nodes.json node_state=$(jq -r --arg FQDN "$FQDN" '.cluster.nodes[] | select(.address==$FQDN) | .status' nodes.json) echo "state is '${node_state}'" done } deleteNode() { echo "deleting node" ${NIFI_TOOLKIT_HOME}/bin/cli.sh nifi delete-node -nnid ${nnid} -u ${baseUrl} ${secureArgs} echo "node deleted" } executeTrap() { echo Received trapped signal, beginning shutdown...; offloadNode; ./bin/nifi.sh stop; deleteNode; exit 0; } trap executeTrap TERM HUP INT; trap ":" EXIT exec bin/nifi.sh run & nifi_pid="$!" echo NiFi running with PID ${nifi_pid}. wait ${nifi_pid} State: Waiting Reason: CrashLoopBackOff Last State: Terminated Reason: Error Exit Code: 5 Started: Wed, 24 Jan 2024 18:03:26 -0300 Finished: Wed, 24 Jan 2024 18:03:27 -0300 Ready: False Restart Count: 15 Liveness: tcp-socket :8443 delay=90s timeout=1s period=60s #success=1 #failure=3 Readiness: tcp-socket :8443 delay=60s timeout=1s period=20s #success=1 #failure=3 Environment: NIFI_ZOOKEEPER_CONNECT_STRING: app-nifi-zookeeper:2181 AWS_STS_REGIONAL_ENDPOINTS: regional AWS_DEFAULT_REGION: us-east-1 AWS_REGION: us-east-1 AWS_ROLE_ARN: arn:aws:iam::111111111111:role/nifi-dev AWS_WEB_IDENTITY_TOKEN_FILE: /var/run/secrets/eks.amazonaws.com/serviceaccount/token Mounts: /opt/nifi/content_repository from content-repository (rw) /opt/nifi/data from data (rw) /opt/nifi/data/flow.xml from flow-content (rw,path="flow.xml") /opt/nifi/flowfile_repository from flowfile-repository (rw) /opt/nifi/nifi-current/auth-conf/ from auth-conf (rw) /opt/nifi/nifi-current/conf/authorizers.temp from authorizers-temp (rw,path="authorizers.temp") /opt/nifi/nifi-current/conf/bootstrap-notification-services.xml from bootstrap-notification-services-xml (rw,path="bootstrap-notification-services.xml") /opt/nifi/nifi-current/conf/bootstrap.conf from bootstrap-conf (rw,path="bootstrap.conf") /opt/nifi/nifi-current/conf/login-identity-providers-ldap.xml from login-identity-providers-ldap-xml (rw,path="login-identity-providers-ldap.xml") /opt/nifi/nifi-current/conf/nifi.temp from nifi-properties (rw,path="nifi.temp") /opt/nifi/nifi-current/conf/state-management.xml from state-management-xml (rw,path="state-management.xml") /opt/nifi/nifi-current/conf/zookeeper.properties from zookeeper-properties (rw,path="zookeeper.properties") /opt/nifi/nifi-current/config-data from config-data (rw) /opt/nifi/nifi-current/logs from logs (rw) /opt/nifi/provenance_repository from provenance-repository (rw) /var/run/secrets/eks.amazonaws.com/serviceaccount from aws-iam-token (ro) /var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-kptf9 (ro) app-log: Container ID: containerd://b86541d7544152de8b096599c28f5ac170805d0709a6e0e94e9248cd02b533a2 Image: busybox:1.32.0 Image ID: docker.io/library/busybox@sha256:bde48e1751173b709090c2539fdf12d6ba64e88ec7a4301591227ce925f3c678 Port: <none> Host Port: <none> Args: /bin/sh -c trap "exit 0" TERM; tail -n+1 -F /var/log/nifi-app.log & wait $! State: Running Started: Wed, 24 Jan 2024 17:11:25 -0300 Ready: True Restart Count: 0 Limits: cpu: 50m memory: 50Mi Requests: cpu: 10m memory: 10Mi Environment: AWS_STS_REGIONAL_ENDPOINTS: regional AWS_DEFAULT_REGION: us-east-1 AWS_REGION: us-east-1 AWS_ROLE_ARN: arn:aws:iam::111111111111:role/nifi-dev AWS_WEB_IDENTITY_TOKEN_FILE: /var/run/secrets/eks.amazonaws.com/serviceaccount/token Mounts: /var/log from logs (rw) /var/run/secrets/eks.amazonaws.com/serviceaccount from aws-iam-token (ro) /var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-kptf9 (ro) bootstrap-log: Container ID: containerd://5c347f134854b1b4d036de51701c83dc986ec1cc5c8bf30c2d704c0eb78573dd Image: busybox:1.32.0 Image ID: docker.io/library/busybox@sha256:bde48e1751173b709090c2539fdf12d6ba64e88ec7a4301591227ce925f3c678 Port: <none> Host Port: <none> Args: /bin/sh -c trap "exit 0" TERM; tail -n+1 -F /var/log/nifi-bootstrap.log & wait $! State: Running Started: Wed, 24 Jan 2024 17:11:25 -0300 Ready: True Restart Count: 0 Limits: cpu: 50m memory: 50Mi Requests: cpu: 10m memory: 10Mi Environment: AWS_STS_REGIONAL_ENDPOINTS: regional AWS_DEFAULT_REGION: us-east-1 AWS_REGION: us-east-1 AWS_ROLE_ARN: arn:aws:iam::111111111111:role/nifi-dev AWS_WEB_IDENTITY_TOKEN_FILE: /var/run/secrets/eks.amazonaws.com/serviceaccount/token Mounts: /var/log from logs (rw) /var/run/secrets/eks.amazonaws.com/serviceaccount from aws-iam-token (ro) /var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-kptf9 (ro) user-log: Container ID: containerd://ee17dbbaed5998639414030e52d3e9a4dbf9eaf584aa20a53062be46997e697b Image: busybox:1.32.0 Image ID: docker.io/library/busybox@sha256:bde48e1751173b709090c2539fdf12d6ba64e88ec7a4301591227ce925f3c678 Port: <none> Host Port: <none> Args: /bin/sh -c trap "exit 0" TERM; tail -n+1 -F /var/log/nifi-user.log & wait $! State: Running Started: Wed, 24 Jan 2024 17:11:25 -0300 Ready: True Restart Count: 0 Limits: cpu: 50m memory: 50Mi Requests: cpu: 10m memory: 10Mi Environment: AWS_STS_REGIONAL_ENDPOINTS: regional AWS_DEFAULT_REGION: us-east-1 AWS_REGION: us-east-1 AWS_ROLE_ARN: arn:aws:iam::111111111111:role/nifi-dev AWS_WEB_IDENTITY_TOKEN_FILE: /var/run/secrets/eks.amazonaws.com/serviceaccount/token Mounts: /var/log from logs (rw) /var/run/secrets/eks.amazonaws.com/serviceaccount from aws-iam-token (ro) /var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-kptf9 (ro) Conditions: Type Status Initialized True Ready False ContainersReady False PodScheduled True Volumes: aws-iam-token: Type: Projected (a volume that contains injected data from multiple sources) TokenExpirationSeconds: 86400 auth-conf: Type: PersistentVolumeClaim (a reference to a PersistentVolumeClaim in the same namespace) ClaimName: auth-conf-app-nifi-0 ReadOnly: false logs: Type: PersistentVolumeClaim (a reference to a PersistentVolumeClaim in the same namespace) ClaimName: logs-app-nifi-0 ReadOnly: false config-data: Type: PersistentVolumeClaim (a reference to a PersistentVolumeClaim in the same namespace) ClaimName: config-data-app-nifi-0 ReadOnly: false data: Type: PersistentVolumeClaim (a reference to a PersistentVolumeClaim in the same namespace) ClaimName: data-app-nifi-0 ReadOnly: false flowfile-repository: Type: PersistentVolumeClaim (a reference to a PersistentVolumeClaim in the same namespace) ClaimName: flowfile-repository-app-nifi-0 ReadOnly: false content-repository: Type: PersistentVolumeClaim (a reference to a PersistentVolumeClaim in the same namespace) ClaimName: content-repository-app-nifi-0 ReadOnly: false provenance-repository: Type: PersistentVolumeClaim (a reference to a PersistentVolumeClaim in the same namespace) ClaimName: provenance-repository-app-nifi-0 ReadOnly: false bootstrap-conf: Type: ConfigMap (a volume populated by a ConfigMap) Name: app-nifi-config Optional: false nifi-properties: Type: ConfigMap (a volume populated by a ConfigMap) Name: app-nifi-config Optional: false authorizers-temp: Type: ConfigMap (a volume populated by a ConfigMap) Name: app-nifi-config Optional: false bootstrap-notification-services-xml: Type: ConfigMap (a volume populated by a ConfigMap) Name: app-nifi-config Optional: false login-identity-providers-ldap-xml: Type: ConfigMap (a volume populated by a ConfigMap) Name: app-nifi-config Optional: false state-management-xml: Type: ConfigMap (a volume populated by a ConfigMap) Name: app-nifi-config Optional: false zookeeper-properties: Type: ConfigMap (a volume populated by a ConfigMap) Name: app-nifi-config Optional: false flow-content: Type: ConfigMap (a volume populated by a ConfigMap) Name: app-nifi-config Optional: false kube-api-access-kptf9: Type: Projected (a volume that contains injected data from multiple sources) TokenExpirationSeconds: 3607 ConfigMapName: kube-root-ca.crt ConfigMapOptional: <nil> DownwardAPI: true QoS Class: Burstable Node-Selectors: <none> Tolerations: name=nifi:NoSchedule node.kubernetes.io/not-ready:NoExecute op=Exists for 300s node.kubernetes.io/unreachable:NoExecute op=Exists for 300s Events: Type Reason Age From Message ---- ------ ---- ---- ------- Normal Scheduled 56m default-scheduler Successfully assigned nifi/app-nifi-0 to ip-10-99-9-30.ec2.internal Normal SuccessfulAttachVolume 56m attachdetach-controller AttachVolume.Attach succeeded for volume "pvc-1a91d1ee-5139-480c-85cd-1b013a87146c" Normal SuccessfulAttachVolume 56m attachdetach-controller AttachVolume.Attach succeeded for volume "pvc-00ae1c3f-ecfe-40e5-86c3-54fac84869e6" Normal SuccessfulAttachVolume 56m attachdetach-controller AttachVolume.Attach succeeded for volume "pvc-a7684ff8-5df2-4bc3-967c-63e599cde1c5" Normal SuccessfulAttachVolume 56m attachdetach-controller AttachVolume.Attach succeeded for volume "pvc-f5765299-98e4-48fa-9f0f-1bafc03bd68a" Normal SuccessfulAttachVolume 56m attachdetach-controller AttachVolume.Attach succeeded for volume "pvc-e4481030-9212-4802-b078-a9d45d46adfe" Normal SuccessfulAttachVolume 56m attachdetach-controller AttachVolume.Attach succeeded for volume "pvc-95f6789e-6745-40fc-a9da-c3f7eda3d30a" Normal SuccessfulAttachVolume 56m attachdetach-controller AttachVolume.Attach succeeded for volume "pvc-4201f276-5a52-4ba8-a2c3-411667d4a040" Normal Pulled 56m kubelet Container image "busybox:1.32.0" already present on machine Normal Created 56m kubelet Created container zookeeper Normal Started 56m kubelet Started container zookeeper Normal Pulled 55m kubelet Successfully pulled image "111111111111.dkr.ecr.us-east-1.amazonaws.com/app-nifi:5ddbdde" in 59.074027755s Normal Pulled 55m kubelet Container image "busybox:1.32.0" already present on machine Normal Started 55m kubelet Started container user-log Normal Created 55m kubelet Created container user-log Normal Pulled 55m kubelet Container image "busybox:1.32.0" already present on machine Normal Created 55m kubelet Created container app-log Normal Started 55m kubelet Started container app-log Normal Pulled 55m kubelet Container image "busybox:1.32.0" already present on machine Normal Created 55m kubelet Created container bootstrap-log Normal Started 55m kubelet Started container bootstrap-log Normal Pulled 55m kubelet Successfully pulled image "111111111111.dkr.ecr.us-east-1.amazonaws.com/app-nifi:5ddbdde" in 191.578433ms Normal Pulling 54m (x3 over 56m) kubelet Pulling image "111111111111.dkr.ecr.us-east-1.amazonaws.com/app-nifi:5ddbdde" Normal Pulled 54m kubelet Successfully pulled image "111111111111.dkr.ecr.us-east-1.amazonaws.com/app-nifi:5ddbdde" in 190.73031ms Normal Started 54m (x3 over 55m) kubelet Started container server Normal Created 54m (x3 over 55m) kubelet Created container server Warning BackOff 69s (x251 over 55m) kubelet Back-off restarting failed containerGet logs on a failed container inside the pod (here the
serverone):values.yaml - Sensitive information will be injected externally and "#{}#" will be replaced by CI/CD
The text was updated successfully, but these errors were encountered: