topic ACI Kubernetes cluster provision failed in DevNet Sandbox

ACI Kubernetes cluster provision failed

tareinma — Fri, 12 Jul 2019 10:54:28 GMT

[developer@sbx30devbox ~]$ ./auto_deploy.sh 30 BXb2weUP cni

Auto Deployment of Kubernetes with ACI CNI Sandbox requested for:

Pod Number: 30

Pod Password: BXb2weUP

Deploy Stage: cni

Would you like to continue? [yes/no]

yes

Beginning Auto Deployment of Kubernetes with ACI CNI Sandbox.

Setup DevBox with Development Tools and Repos

done

Create and deploy RSA keys for passwordless login to pod nodes from DevBox

done

Installing Kubernetes admin tools onto DevBox

done

Configuring Linux network plumbing on Kubernetes nodes.

done

Installing prerequisites and preparing Linux on Kuberentes nodes.

done

Setting up a new Kubernetes Cluster on Kubernetes nodes.

Problem

Re: ACI Kubernetes cluster provision failed

tareinma — Sun, 14 Jul 2019 09:08:18 GMT

It seem that

@tareinma wrote:

[developer@sbx30devbox ~]$ ./auto_deploy.sh 30 BXb2weUP cni

Auto Deployment of Kubernetes with ACI CNI Sandbox requested for:

Pod Number: 30

Pod Password: BXb2weUP

Deploy Stage: cni

Would you like to continue? [yes/no]

yes

Beginning Auto Deployment of Kubernetes with ACI CNI Sandbox.

Setup DevBox with Development Tools and Repos

done

Create and deploy RSA keys for passwordless login to pod nodes from DevBox

done

Installing Kubernetes admin tools onto DevBox

done

Configuring Linux network plumbing on Kubernetes nodes.

done

Installing prerequisites and preparing Linux on Kuberentes nodes.

done

Setting up a new Kubernetes Cluster on Kubernetes nodes.

Problem

security gateway tried to do ssl intercept, Please help to fix it ASAP.

[developer@sbx29kube01 ~]$ kubeadm init --token ab01bf.1h58iu90bdfr1234 --pod-network-cidr=10.229.0.1/16 --service-cidr=192.168.229.1/24 --apiserver-advertise-address=172.20.29.11

[kubeadm] WARNING: kubeadm is in beta, please do not use it for production clusters.

unable to get URL "https://storage.googleapis.com/kubernetes-release/release/stable-1.7.txt": Get https://storage.googleapis.com/kubernetes-release/release/stable-1.7.txt: x509: certificate signed by unknown authority

[developer@sbx29kube01 ~]$ echo | openssl s_client -connect storage.googleapis.com:443 | egrep "^subject=|^issuer="

depth=2 C = US, ST = California, L = San Francisco, O = Cisco, CN = Cisco Umbrella Primary SubCA

verify error:num=20:unable to get local issuer certificate

DONE

subject=/C=US/ST=California/L=San Francisco/O=OpenDNS, Inc./CN=*.opendns.com

issuer=/O=Cisco/CN=Cisco Umbrella Secondary SubCA pao-SG

Re: ACI Kubernetes cluster provision failed

zowu — Mon, 15 Jul 2019 14:26:24 GMT

Hi,

We've fixed the certificate issue. And the cluster could be setup now.

Installing the ACI CNI plug-in for Kuberentes
done

Requested Phase 'full' complete.
[developer@sbx16devbox kube_setup]$ kubectl get nodes
NAME STATUS AGE VERSION
sbx16kube01.localdomain Ready 1m v1.7.15
sbx16kube02.localdomain Ready 1m v1.7.15
sbx16kube03.localdomain Ready 1m v1.7.15