Skip to content
This repository has been archived by the owner on Oct 3, 2020. It is now read-only.

:Failed to query cluster 10-96-0-1:443 #270

Open
tscswcn opened this issue Aug 1, 2020 · 9 comments
Open

:Failed to query cluster 10-96-0-1:443 #270

tscswcn opened this issue Aug 1, 2020 · 9 comments

Comments

@tscswcn
Copy link

tscswcn commented Aug 1, 2020

ERROR:kube_ops_view.update:Failed to query cluster 10-96-0-1:443 (https://10.96.0.1:443): 403 Forbidden (try 13, wait 62 seconds)
ERROR:kube_ops_view.update:Failed to query cluster 10-96-0-1:443 (https://10.96.0.1:443): 403 Forbidden (try 14, wait 63 seconds)
ERROR:kube_ops_view.update:Failed to query cluster 10-96-0-1:443 (https://10.96.0.1:443): 403 Forbidden (try 15, wait 63 seconds)
ERROR:kube_ops_view.update:Failed to query cluster 10-96-0-1:443 (https://10.96.0.1:443): 403 Forbidden (try 16, wait 61 seconds)
ERROR:kube_ops_view.update:Failed to query cluster 10-96-0-1:443 (https://10.96.0.1:443): 403 Forbidden (try 17, wait 61 seconds)
ERROR:kube_ops_view.update:Failed to query cluster 10-96-0-1:443 (https://10.96.0.1:443): 403 Forbidden (try 18, wait 61 seconds)
ERROR:kube_ops_view.update:Failed to query cluster 10-96-0-1:443 (https://10.96.0.1:443): 403 Forbidden (try 19, wait 62 seconds)
ERROR:kube_ops_view.update:Failed to query cluster 10-96-0-1:443 (https://10.96.0.1:443): 403 Forbidden (try 20, wait 64 seconds)
ERROR:kube_ops_view.update:Failed to query cluster 10-96-0-1:443 (https://10.96.0.1:443): 403 Forbidden (try 21, wait 61 seconds)
ERROR:kube_ops_view.update:Failed to query cluster 10-96-0-1:443 (https://10.96.0.1:443): 403 Forbidden (try 22, wait 63 seconds)
..127.236 - - [2020-08-01 10:03:19] "GET / HTTP/1.1" 200 1459 0.001179
ERROR:kube_ops_view.update:Failed to query cluster 10-96-0-1:443 (https://10.96.0.1:443): 403 Forbidden (try 23, wait 61 seconds)
ERROR:kube_ops_view.update:Failed to query cluster 10-96-0-1:443 (https://10.96.0.1:443): 403 Forbidden (try 24, wait 62 seconds)
..127.236 - - [2020-08-01 10:04:54] "GET /events HTTP/1.1" 200 472 95.085549
ERROR:kube_ops_view.update:Failed to query cluster 10-96-0-1:443 (https://10.96.0.1:443): 403 Forbidden (try 25, wait 63 seconds)
..127.236 - - [2020-08-01 10:05:58] "GET /events HTTP/1.1" 200 601 138.295105
**.**127.236 - - [2020-08-01 10:05:58] "GET /events HTTP/1.1" 200 472 104.705084
ERROR:kube_ops_view.update:Failed to query cluster 10-96-0-1:443 (https://10.96.0.1:443): 403 Forbidden (try 26, wait 62 seconds)
..127.236 - - [2020-08-01 10:07:02] "GET /events HTTP/1.1" 200 472 148.487479
..127.236 - - [2020-08-01 10:07:02] "GET /events HTTP/1.1" 200 472 107.325366
ERROR:kube_ops_view.update:Failed to query cluster 10-96-0-1:443 (https://10.96.0.1:443): 403 Forbidden (try 27, wait 60 seconds)
..127.236 - - [2020-08-01 10:08:05] "GET /events HTTP/1.1" 200 472 190.628335
10.120.127.236 - - [2020-08-01 10:08:05] "GET /events HTTP/1.1" 200 601 128.819008
ERROR:kube_ops_view.update:Failed to query cluster 10-96-0-1:443 (https://10.96.0.1:443): 403 Forbidden (try 28, wait 61 seconds)
[root@node-10-120-13-236 .kube]# kubectl describe pods kubeops-79d85c8c84-45v95
Name: kubeops-79d85c8c84-45v95
Namespace: default
Priority: 0
Node: node- **.**0-127-236/ ..127.236
Start Time: Sat, 01 Aug 2020 11:43:43 +0200
Labels: pod-template-hash=79d85c8c84
run=kubeops
Annotations: cni.projectcalico.org/podIP: 192.168.95.3/32
Status: Running
IP: 192.168.95.3
IPs:
IP: 192.168.95.3
Controlled By: ReplicaSet/kubeops-79d85c8c84
Containers:
kubeops:
Container ID: docker://2b6b26a41f9c23d41331d0165ef076ac9b08e5aaf8b36cf641085ab2fe598b58
Image: hjacobs/kube-ops-view
Image ID: docker-pullable://hjacobs/kube-ops-view@sha256:58221b57d4d23efe7558355c58ad7c66c8458db20b1f55ddd9f89cc9275bbc90
Port: 8080/TCP
Host Port: 58080/TCP
State: Running
Started: Sat, 01 Aug 2020 11:43:45 +0200
Ready: True
Restart Count: 0
Environment:
Mounts:
/var/run/secrets/kubernetes.io/serviceaccount from default-token-cfnbd (ro)
Conditions:
Type Status
Initialized True
Ready True
ContainersReady True
PodScheduled True
Volumes:
default-token-cfnbd:
Type: Secret (a volume populated by a Secret)
SecretName: default-token-cfnbd
Optional: false
QoS Class: BestEffort
Node-Selectors:
Tolerations: node.kubernetes.io/not-ready:NoExecute for 300s
node.kubernetes.io/unreachable:NoExecute for 300s
Events:
Type Reason Age From Message


Normal Scheduled default-scheduler Successfully assigned default/kubeops-79d85c8c84-45v95 to node-10-120-127-236
Normal Pulling 26m kubelet, node-1127-236 Pulling image "hjacobs/kube-ops-view"
Normal Pulled 26m kubelet, node-1236 Successfully pulled image "hjacobs/kube-ops-view"
Normal Created 26m kubelet, no1-127-236 Created container kubeops
Normal Started 26m kubelet, nod
1127-236 Started container kubeops

@tbox1911
Copy link

tbox1911 commented Aug 11, 2020

set create rbac creation to true (in values.yaml)

rbac:
create: true

or create your ClusterRole/ClusterRoleBinding

@tscswcn
Copy link
Author

tscswcn commented Aug 30, 2020

ERROR:kube_ops_view.update:Failed to query cluster 10-96-0-1:443 (https://10.96.0.1:443): 403 Forbidden (try 864, wait 60 seconds)

@tscswcn
Copy link
Author

tscswcn commented Aug 30, 2020

set create rbac creation to true (in values.yaml)

rbac:
create: true

or create your ClusterRole/ClusterRoleBinding

not found this yaml file

@tscswcn
Copy link
Author

tscswcn commented Aug 30, 2020

still have issue and the rbac.yaml include clusterrole and clusterrolebing, pleas help

@filipegalo
Copy link

I'm also getting the same error mentioned above.
ERROR:kube_ops_view.update:Failed to query cluster 10-96-0-1:443 (https://10.96.0.1:443): 403 Forbidden (try 47, wait 63 seconds)

For what I understand, kube_ops_view doesn't have the permissions to query the Kubernetes API. Maybe something related to the ServiceAccount created ? I already tripled checked the configurations and all looks good.

Any ideas?

@tscswcn
Copy link
Author

tscswcn commented Sep 21, 2020

maybe the apiserver has issue. I have deployed the kube_ops well in the case . I still don't know how to debug, can anybody guild us on this?

@tbox1911
Copy link

tbox1911 commented Sep 22, 2020

hi,
what I do:

go to : https://github.com/helm/charts/tree/master/stable/kube-ops-view
download "values.yaml" file
change:

rbac:
  create: true

Install the helm;
helm install kube-ops-view stable/kube-ops-view -f values.yaml

to acces web interface, start kubectl proxy and open:
http://localhost:8001/api/v1/namespaces/default/services/http:kube-ops-view:/proxy/#

@filipegalo
Copy link

image

Now I'm getting a 404 using helm to deploy kube-ops-view

@tbox1911
Copy link

look like you miss the metric-server on your minikube.

try minikube addons enable metrics-server

and re-test

kubectl top pod should works

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants