Openshift: oc/kubectl get svc showing External IP in pending

Bug #1713573 reported by chhandak
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Juniper Openstack
Invalid
Critical
Sachchidanand Vaidya

Bug Description

In Openshift cluster while creating Service Type loadbanacer it is not showing the IP in oc/kubectl output. In contrail FLoating IP is getting created properly and asscoited with Service VMI. But Openshift client is not showing the IP

[root@5b7s18 ~]# oc get svc --all-namespaces
NAMESPACE NAME CLUSTER-IP EXTERNAL-IP PORT(S) AGE
ctest-namespace-74229152 ctest-nginx-svc-88443061 10.109.121.151 <none> 80/TCP 1d
ctest-namespace-92464843 ctest-nginx-svc-22735245 10.100.49.246 <pending> 80:32385/TCP 1h
default docker-registry 10.98.148.57 <none> 5000/TCP 6d
default kubernetes 10.96.0.1 <none> 443/TCP,53/UDP,53/TCP 6d
default registry-console 10.100.151.191 <none> 9000/TCP 6d
default router 10.101.6.87 <none> 80/TCP,443/TCP,1936/TCP 6d
juniper frontend 10.111.127.190 <pending> 80:31063/TCP 2h
[root@5b7s18 ~]#
[root@5b7s18 ~]#
[root@5b7s18 ~]# kubectl describe service ctest-nginx-svc-22735245 -n ctest-namespace-92464843
Name: ctest-nginx-svc-22735245
Namespace: ctest-namespace-92464843
Labels: <none>
Annotations: <none>
Selector: app=http_test
Type: LoadBalancer
IP: 10.100.49.246
Port: <unset> 80/TCP
NodePort: <unset> 32385/TCP
Endpoints: <none>
Session Affinity: None
Events: <none>

Service Type is not Loadbalancer it is working fine

[root@5b7s18 ~]# oc get svc --all-namespaces
NAMESPACE NAME CLUSTER-IP EXTERNAL-IP PORT(S) AGE
ctest-namespace-62207692 ctest-nginx-svc-69404119 10.105.68.163 10.87.117.252 80/TCP 3m
ctest-namespace-74229152 ctest-nginx-svc-88443061 10.109.121.151 <none> 80/TCP 1d
default docker-registry 10.98.148.57 <none> 5000/TCP 6d
default kubernetes 10.96.0.1 <none> 443/TCP,53/UDP,53/TCP 6d
default registry-console 10.100.151.191 <none> 9000/TCP 6d
default router 10.101.6.87 <none> 80/TCP,443/TCP,1936/TCP 6d
juniper frontend 10.111.127.190 <pending> 80:31063/TCP 2h
[root@5b7s18 ~]# kubectl describe service ctest-nginx-svc-69404119 -n ctest-namespace-62207692
Name: ctest-nginx-svc-69404119
Namespace: ctest-namespace-62207692
Labels: <none>
Annotations: <none>
Selector: app=http_test
Type: ClusterIP
IP: 10.105.68.163
External IPs: 10.87.117.252
Port: <unset> 80/TCP
Endpoints: 10.47.255.238:80,10.47.255.239:80
Session Affinity: None
Events: <none>
[root@5b7s18 ~]#

chhandak (chhandak)
Changed in juniperopenstack:
importance: Undecided → Critical
assignee: nobody → Sachchidanand Vaidya (vaidyasd)
milestone: none → r4.0.1.0
tags: added: contrail-kube-manager openshift
information type: Proprietary → Public
chhandak (chhandak)
description: updated
Revision history for this message
chhandak (chhandak) wrote :

contrail-kube-manager was not having required access to post on Openshift API server. Following has solved the problem.

[root@5b7s18 ~]#
[root@5b7s18 ~]#
[root@5b7s18 ~]# oc project juniper
Already on project "juniper" on server "https://5b7s18.englab.juniper.net:8443".
[root@5b7s18 ~]# oc create serviceaccount useroot
Error from server (AlreadyExists): serviceaccounts "useroot" already exists
[root@5b7s18 ~]# oadm policy add-cluster-role-to-user cluster-admin system:serviceaccount:juniper:useroot
cluster role "cluster-admin" added: "system:serviceaccount:juniper:useroot"
[root@5b7s18 ~]# oadm policy add-scc-to-user privileged system:serviceaccount:juniper:useroot
[root@5b7s18 ~]# oc serviceaccounts get-token useroot
eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJrdWJlcm5ldGVzL3NlcnZpY2VhY2NvdW50Iiwia3ViZXJuZXRlcy5pby9zZXJ2aWNlYWNjb3VudC9uYW1lc3BhY2UiOiJqdW5pcGVyIiwia3ViZXJuZXRlcy5pby9zZXJ2aWNlYWNjb3VudC9zZWNyZXQubmFtZSI6InVzZXJvb3QtdG9rZW4tNjdjaDciLCJrdWJlcm5ldGVzLmlvL3NlcnZpY2VhY2NvdW50L3NlcnZpY2UtYWNjb3VudC5uYW1lIjoidXNlcm9vdCIsImt1YmVybmV0ZXMuaW8vc2VydmljZWFjY291bnQvc2VydmljZS1hY2NvdW50LnVpZCI6IjczZmE0NWZlLTg4MDQtMTFlNy1iMWE0LTBjYzQ3YWE4OWU2NCIsInN1YiI6InN5c3RlbTpzZXJ2aWNlYWNjb3VudDpqdW5pcGVyOnVzZXJvb3QifQ.OSX5C2Ms0-lCF4FEhirQCq5UYBGqNubomTXY5Oc6bIgNhLt-X7bwgg8GCay5kj2nhfY3EqpdQ4reZr42MaCFc8sZtCZ2EEDe0fzzhiUTCmxTSTXrt9Dbm4kQkHQlMUk47RL1LYR5yMn9KA0MyzXsXOxpNLm1aZ4QuCjRxz_h438bxqMR9OYrUp18qAZ-kWtefJIPy17-XK2Tr0xyuX2oKI-9IgVMqDTtnIBsBNc82NalkRGyb8V-R6-wgrXkeMwlfO5pU2uzZpW4wVTsXeK9ctBC0E4C-z0soYQ-q-JPa5FrletQ_NxCAB8OIv5ndy5KPiI5cgd39HDCpe7EIPAOnw

Changed in juniperopenstack:
status: New → Invalid
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.