cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
938
Views
0
Helpful
2
Replies

ACI Kubernetes cluster provision failed

tareinma
Cisco Employee
Cisco Employee

 

[developer@sbx30devbox ~]$ ./auto_deploy.sh 30 BXb2weUP cni

Auto Deployment of Kubernetes with ACI CNI Sandbox requested for:

  Pod Number: 30

  Pod Password: BXb2weUP

Deploy Stage: cni

Would you like to continue? [yes/no]

yes

Beginning Auto Deployment of Kubernetes with ACI CNI Sandbox.

 

Setup DevBox with Development Tools and Repos

done

 

Create and deploy RSA keys for passwordless login to pod nodes from DevBox

done

 

Installing Kubernetes admin tools onto DevBox

done

 

Configuring Linux network plumbing on Kubernetes nodes.

done

 

Installing prerequisites and preparing Linux on Kuberentes nodes.

done

 

Setting up a new Kubernetes Cluster on Kubernetes nodes.

Problem

1 Accepted Solution

Accepted Solutions

Hi,

We've fixed the certificate issue. And the cluster could be setup now.

Installing the ACI CNI plug-in for Kuberentes
done

Requested Phase 'full' complete.
[developer@sbx16devbox kube_setup]$ kubectl get nodes
NAME STATUS AGE VERSION
sbx16kube01.localdomain Ready 1m v1.7.15
sbx16kube02.localdomain Ready 1m v1.7.15
sbx16kube03.localdomain Ready 1m v1.7.15

View solution in original post

2 Replies 2

tareinma
Cisco Employee
Cisco Employee

It seem that


@tareinma wrote:

 

[developer@sbx30devbox ~]$ ./auto_deploy.sh 30 BXb2weUP cni

Auto Deployment of Kubernetes with ACI CNI Sandbox requested for:

  Pod Number: 30

  Pod Password: BXb2weUP

Deploy Stage: cni

Would you like to continue? [yes/no]

yes

Beginning Auto Deployment of Kubernetes with ACI CNI Sandbox.

 

Setup DevBox with Development Tools and Repos

done

 

Create and deploy RSA keys for passwordless login to pod nodes from DevBox

done

 

Installing Kubernetes admin tools onto DevBox

done

 

Configuring Linux network plumbing on Kubernetes nodes.

done

 

Installing prerequisites and preparing Linux on Kuberentes nodes.

done

 

Setting up a new Kubernetes Cluster on Kubernetes nodes.

Problem



security gateway tried to do ssl intercept, Please help to fix it ASAP. 

 

[developer@sbx29kube01 ~]$ kubeadm init --token ab01bf.1h58iu90bdfr1234 --pod-network-cidr=10.229.0.1/16 --service-cidr=192.168.229.1/24 --apiserver-advertise-address=172.20.29.11

[kubeadm] WARNING: kubeadm is in beta, please do not use it for production clusters.

unable to get URL "https://storage.googleapis.com/kubernetes-release/release/stable-1.7.txt": Get https://storage.googleapis.com/kubernetes-release/release/stable-1.7.txt: x509: certificate signed by unknown authority

 

[developer@sbx29kube01 ~]$ echo | openssl s_client -connect storage.googleapis.com:443   | egrep "^subject=|^issuer="

depth=2 C = US, ST = California, L = San Francisco, O = Cisco, CN = Cisco Umbrella Primary SubCA

verify error:num=20:unable to get local issuer certificate

DONE

subject=/C=US/ST=California/L=San Francisco/O=OpenDNS, Inc./CN=*.opendns.com

issuer=/O=Cisco/CN=Cisco Umbrella Secondary SubCA pao-SG

 

Hi,

We've fixed the certificate issue. And the cluster could be setup now.

Installing the ACI CNI plug-in for Kuberentes
done

Requested Phase 'full' complete.
[developer@sbx16devbox kube_setup]$ kubectl get nodes
NAME STATUS AGE VERSION
sbx16kube01.localdomain Ready 1m v1.7.15
sbx16kube02.localdomain Ready 1m v1.7.15
sbx16kube03.localdomain Ready 1m v1.7.15