Installation issue of v1.11.0

[choonho]

Installation Issue of Version 1.11.0

If you have any problems of installation. Please add comments.

[yangmingyu2020]

Hello, I encountered an issue while following the installation guide at https://cloudforet.io/ko/docs/setup_operation/installation/on_premise/

After performing the step [5. Initialize the configuration], when I run the command
$ kubectl logs initializer-5f5b7b5cdc-abcd1 -n spaceone

I see the following error log, and I'm unable to proceed with the subsequent steps

TASK [Create Marketplace Repository] ***********************************************************************************
(ERROR) =>
Server is unavailable. (channel = repository.portal.spaceone.dev:50051, message = Channel is not ready.)
>> Spec: {"resource_type": "repository.Repository", "data": {"domain_id": "domain-64aba901a19b", "name": "Marketplace", "repository_type": "remote", "endpoint": "grpc://repository.portal.spaceone.dev:50051"}, "mode": "EXEC", "verb": {"read": "list", "create": "create", "update": "update", "exec": "register"}, "matches": [], "no_verification": true}

I suspect that there might be an incorrect configuration in the initializer.yaml file, specifically in the marketplace_endpoint section.

Could you please provide guidance on how to resolve this issue?

[GeunjeLEE]

Hi @yangmingyu2020 :)

When you run the initializer, Cloudforet try to connect to open-source marketplace.
But, There are cases where the marketplace's grpc channel is unavailable due to network issues in the on-premise environment.

So, you can install cloudforet with local mode instead of default mode.

please reinstall initializer with local mode.
https://github.com/cloudforet-io/spaceone-initializer#local-mode-without-marketplace
(Also, We will update document to install with default mode)

If you get an other error, Please continue to leave comments.

---

1. uninstall initializer

helm install initializer -n spaceone

2. modify initializer values.yaml with local mode

main:
  import:
    - /root/spacectl/apply/root_domain.yaml
    - /root/spacectl/apply/create_managed_repository.yaml
    - /root/spacectl/apply/user_domain.yaml
    - /root/spacectl/apply/create_role.yaml
    - /root/spacectl/apply/add_statistics_schedule.yaml
    - /root/spacectl/apply/print_api_key.yaml
  var:
    domain:
      root: root
      user: spaceone
    default_language: ko
    default_timezone: Asia/Seoul
    domain_owner:
      id: admin
      password: Admin123!@#         # Change your password
    user:
      id: system_api_key

3. reinstall initializer

helm install initializer cloudforet/spaceone-initializer -n spaceone -f initializer.yaml

[yangmingyu2020]

친절한 답변 감사합니다!

[yangmingyu2020]

하나만 더 여쭤봐도 될까요?

[8. Configuration Ingress]을 진행하는 과정에서 Create Secret from certificate_secret.yaml file 에서

data:
  tls.crt: base64 encoded cert  # openssl base64 -in cert.pem -out cert.base64
  tls.key: base64 encoded key   # openssl base64 -in key.pem -out key.base64

이 부분의 cert.pem과 key.pem 부분을 잘 모르겠어서요

그 바로 전에 진행한 console과 api의 인증서 발급과정에서 생성된 (console_ssl.csr, console_ssl.pem)과 (api_ssl.csr, api_ssl.pem) 둘 중에 하나를 선택해서 값을 넣어주는건가요?

[GeunjeLEE]

안녕하세요.

document를 리뷰해본 결과, 혼란스러울 수 있는 부분이 있어 nginx-ingress의 공식 문서를 참고하여 tls 설정 방법을 안내해드립니다.
(남겨주신 피드백을 바탕으로, document는 추후 업데이트 될 예정입니다. 감사합니다.)

---

Generate self-managed SSL

아래의 openssl 명령어를 이용해서 사설 ssl 인증서를 생성합니다. (준비된 인증서가 있다면 사설 인증서 생성은 skip 해도 됩니다.)

• console
  • *.{domain}

openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout console_ssl.pem -out console_ssl.csr -subj "/CN=*.{domain}/O=spaceone" -addext "subjectAltName = DNS:*.{domain}"

• api
  • *.api.{domain}

openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout api_ssl.pem -out api_ssl.csr -subj "/CN=*.api.{domain}/O=spaceone" -addext "subjectAltName = DNS:*.api.{domain}"

Create secret for ssl

인증서가 준비 되었다면 해당 인증서 파일을 이용해서 secret을 생성합니다.

kubectl create secret tls console-ssl --key console_ssl.pem --cert console_ssl.csr

kubectl create secret tls api-ssl --key api_ssl.pem --cert api_ssl.csr

Create Ingress

아래 2개의 ingress 파일을 준비합니다. 해당 ingress 파일들은 다음의 링크에서 다운로드 가능합니다.

console_ingress.yaml : https://github.com/cloudforet-io/charts/blob/master/examples/ingress/on_premise/console_ingress.yaml

rest_api_ingress.yaml : https://github.com/cloudforet-io/charts/blob/master/examples/ingress/on_premise/rest_api_ingress.yaml

각각의 파일은 아래와 같습니다. 파일 내부에 hostname을 생성한 인증서의 도메인에 맞게 변경해줍니다.

• console

cat <<EOF> console_ingress.yaml
---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
name: console-ingress
namespace: spaceone
spec:
ingressClassName: nginx
tls:
    - hosts:
        - "console.example.com"  # Change the hostname
    secretName: console-ssl
rules:
    - host: "console.example.com"  # Change the hostname
    http:
        paths:
        - path: /
            pathType: Prefix
            backend:
            service:
                name: console 
                port:
                number: 80
EOF

• rest_api

cat <<EOF> rest_api_ingress.yaml
---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
name: console-api-ingress
namespace: spaceone
spec:
ingressClassName: nginx
tls:
    - hosts:
        - "*.api.example.com"  # Change the hostname
    secretName: api-ssl
rules:
    - host: "console.api.example.com"  # Change the hostname
    http:
        paths:
        - path: /
            pathType: Prefix
            backend:
            service:
                name: console-api
                port:
                number: 80
---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
name: console-api-v2-ingress
namespace: spaceone
spec:
ingressClassName: nginx
tls:
    - hosts:
        - "*.api.example.com"  # Change the hostname
    secretName: api-ssl
rules:
    - host: "console-v2.api.example.com"  # Change the hostname
    http:
        paths:
        - path: /
            pathType: Prefix
            backend:
            service:
                name: console-api-v2-rest
                port:
                number: 80
EOF

준비된 ingress를 아래의 명령어를 통해서 spaceone namespace에 생성합니다.

kubectl apply -f console_ingress.yaml -n spaceone
kubectl apply -f rest_api_ingress.yaml -n spaceone

[yangmingyu2020]

덕분에 해결되었습니다 감사합니다!