This message was deleted.
# generals
Slackbot
03/08/2024, 5:40 PMThis message was deleted.
j
Jason Witkowski
03/08/2024, 5:44 PMI have attempted giving the container more resources and increasing the timeout levels on probes to very high numbers but it never completes. I can see traffic going out to the kube-apiserver. I'm wondering if its attempting to use the SSLContext for the mTLS to attempt that? I'd imagine I'd see errors
Jason Witkowski
03/08/2024, 6:38 PMUsing a sidecar I can query the Kubernetes API with the pods service account and token. The roles are in place and the networking is not an issue. The only thing that changed was enabling mTLS
Jason Witkowski
03/08/2024, 6:48 PMEnabling debug logging I can see
Copy code
2024-03-08T18:43:44,734 DEBUG [LeaderElectorAsyncWrapper] io.kubernetes.client.extended.leaderelection.LeaderElector - Successfully renewed lease
2024-03-08T18:43:44,758 DEBUG [leader-elector-hook-worker-1] io.fabric8.kubernetes.client.Config - Trying to configure client from Kubernetes config...
2024-03-08T18:43:44,759 DEBUG [leader-elector-hook-worker-1] io.fabric8.kubernetes.client.Config - Did not find Kubernetes config at: [/opt/druid/.kube/config]. Ignoring.
2024-03-08T18:43:44,759 DEBUG [leader-elector-hook-worker-1] io.fabric8.kubernetes.client.Config - Trying to configure client from service account...
2024-03-08T18:43:44,759 DEBUG [leader-elector-hook-worker-1] io.fabric8.kubernetes.client.Config - Found service account host and port: 172.17.0.1:443
2024-03-08T18:43:44,759 DEBUG [leader-elector-hook-worker-1] io.fabric8.kubernetes.client.Config - Found service account ca cert at: [/var/run/secrets/kubernetes.io/serviceaccount/ca.crt}].
2024-03-08T18:43:44,759 DEBUG [leader-elector-hook-worker-1] io.fabric8.kubernetes.client.Config - Found service account token at: [/var/run/secrets/kubernetes.io/serviceaccount/token].
2024-03-08T18:43:44,759 DEBUG [leader-elector-hook-worker-1] io.fabric8.kubernetes.client.Config - Trying to configure client namespace from Kubernetes service account namespace path...
2024-03-08T18:43:44,759 DEBUG [leader-elector-hook-worker-1] io.fabric8.kubernetes.client.Config - Found service account namespace at: [/var/run/secrets/kubernetes.io/serviceaccount/namespace].Jason Witkowski
03/08/2024, 7:01 PMugh
Jason Witkowski
03/08/2024, 7:01 PMits the port in the docs doesn't match the kubernetes druid helm chart
4 Views