通过头盔安装JFROG文物,安装错误



试图安装:JFrog trifactory ha平台:CoreOS上的GCE Kubernetes群集;1个大师,2名工人安装方法:掌舵图掌舵步骤:

  1. 将JFrog Repo添加到本地掌舵:helm repo add jfrog https://charts.jfrog.io
  2. 在集群中以Kubernetes的秘密安装许可证:kubectl create secret generic artifactory-cluster-license --from-file=./art.lic
  3. 通过Helm安装: helm install --name artifactory-ha jfrog/artifactory-ha --set artifactory.masterKey=,artifactory.license.secret=artifactory-cluster-license,artifactory.license.dataKey=art.lic

结果:

头盔安装毫不费力。检查服务似乎很好,LoadBalancer正在待处理并上网。

检查的PVS和PVC,似乎很好且绑定:

NAME STATUS artifactory-ha-postgresql Bound volume-artifactory-ha-artifactory-ha-member-0 Bound volume-artifactory-ha-artifactory-ha-primary-0 Bound

检查了豆荚,只有Postgres准备就绪:

NAME READY STATUS RESTARTS AGE artifactory-ha-artifactory-ha-member-0 0/1 Running 0 3m artifactory-ha-artifactory-ha-primary-0 0/1 Running 0 3m artifactory-ha-nginx-697844f76-jt24s 0/1 Init:0/1 0 3m artifactory-ha-postgresql-676999df46-bchq9 1/1 Running 0 3m

等待几分钟,没有改变。等待2个小时,仍然处于与上述相同的状态。检查artifactory-ha-artifactory-ha-primary-0 POD的日志(它很长,但是我可以发布是否有助于任何人确定问题),但注意到此错误:

SEVERE: One or more listeners failed to start. Full details will be found in the appropriate container log file。我想不出还有其他检查日志的地方。服务正在运行,其他豆荚似乎正在等待此主要豆荚。

日志继续使用SEVERE: Context [/artifactory] startup failed due to previous errors,然后在"访问" ASCII ART之后开始喷出Java堆栈转储,诸如WARNING: The web application [artifactory] appears to have started a thread named [Thread-5] but has failed to stop it. This is very likely to create a memory leak. Stack trace of thread:

之类的消息

我最终整夜离开了群集,现在,大约12小时后,我很惊讶地看到"主要" POD确实上网了:

NAME READY STATUS RESTARTS AGE artifactory-ha-artifactory-ha-member-0 1/1 Terminating 0 19m artifactory-ha-artifactory-ha-member-1 0/1 Terminating 0 17m artifactory-ha-artifactory-ha-primary-0 1/1 Running 0 3h artifactory-ha-nginx-697844f76-vsmzq 0/1 Running 38 3h artifactory-ha-postgresql-676999df46-gzbpm 1/1 Running 0 3h

不过,nginx pod没有。它最终在其init容器命令(until nc -z -w 2 artifactory-ha 8081 && echo artifactory ok; do)上取得了成功,但无法通过其准备就绪探针: Warning Unhealthy 1m (x428 over 3h) kubelet, spczufvthh-worker-1 Readiness probe failed: Get http://10.2.2.45:80/artifactory/webapp/#/login: net/http: request canceled (Client.Timeout exceeded while awaiting headers)

也许我错过了设置或舵机安装开关中所需的一些步骤?这是我第一次尝试设置Jfrog Artifactory HA,我注意到大多数说明似乎是针对Baremetal簇的,所以也许我感到困惑。

任何帮助都将受到赞赏!

结果我们弄乱了几件事,并且对安装过程的工作方式有一些误解。也许这对将来的人有所帮助。

1)masterKey值必须至少16个字符。我们最初尝试过太短钥匙。我们尝试再次安装并将此新的masterKey写成一个秘密,但是...

2)秘密中的值似乎在初始安装尝试时会被读取一次,然后将其写入持久卷并更新秘密之后,似乎没有效果。

3)我们也不了解许可证密钥格式和约束。您需要每个将运行文物的节点的许可证,并且所有许可证都归入一个文件,每个许可证都由两个返回/新行分开。

在这些错误中,错误日志对我们无济于事。我们最终消除了安装,包括PV,最后一切都很好。

最新更新