Uploaded image for project: 'Integrated Cloud Native NFV'
  1. Integrated Cloud Native NFV
  2. ICN-611

'make kud_bm_deploy_mini' fails with secrets not found

    XMLWordPrintable

Details

    • Bug
    • Resolution: Unresolved
    • Medium
    • None

    Description

      After a failed deployment of Akraino ICN, I see the following error coming up when running the 'make kud_bm_deploy_mini' step:

      ...
      Apply Multus Daemonset ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------- 1.16s
      Run the test cases if testing_enabled is set to true.
      Add-ons deployment complete...
      Edit cancelled, no changes made.
      service/kubernetes-dashboard edited
      ~/icn/deploy/kud
      Error from server (NotFound): secrets "default-token-g4fx7" not found
      Makefile:69: recipe for target 'kud_bm_deploy_mini' failed
      make: *** [kud_bm_deploy_mini] Error 1

      This is happening in the 'verifier' function of the 'deploy/kud/kud_bm_launch.sh' that is called by that Makefile target.

      Looking up the'serviceaccount', I see

      $ sudo kubectl get serviceaccount default -o json
      {
      "apiVersion": "v1",
      "kind": "ServiceAccount",
      "metadata":

      Unknown macro: { "creationTimestamp"}

      ,
      "secrets": [

      Unknown macro: { "name"}

      ,

      Unknown macro: { "name"}

      ,

      Unknown macro: { "name"}

      ]

      There are three tokens listed in there. BUT, looking up the secrets:

      $ sudo kubectl get secrets
      NAME TYPE DATA AGE
      bpa-operator-token-xgpqw kubernetes.io/service-account-token 3 7d16h
      default-token-j7pfx kubernetes.io/service-account-token 3 28m
      ssh-key-secret Opaque 2 7d16h

      The default token that's listed in there is valid but the logic in the 'verifier' function only tries to use the first one from the default serviceaccount (i.e. .secrets[0].name), whereas the valid token is in third position.

       

      I don not know what is causing these tokens to be added but deleting the extraneous ones so as to keep only the one listed by 'kubectl get secrets' will allow 'make kud_bm_deploy_mini' to succeed.

      To delete the extra tokens: 'sudo kubectl edit serviceaccount default' and remove the lines with the tokens that are not valid.

      Attachments

        Activity

          People

            r.kuralamudhan Kuralamudhan Ramakrishnan
            gvancuts Geoffroy Van Cutsem
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated: