通过Helm安装jFrog Artifactory,安装错误

问题描述 投票:0回答:1

尝试安装:jFrog Artifactory HA平台:CoreOS上的GCE kubernetes集群; 1名主人,2名工人安装方法:Helm chart采取的头盔步骤:

  1. 将jFrog repo添加到本地helm:helm repo add jfrog https://charts.jfrog.io
  2. 在群集中安装许可证为kubernetes secret:kubectl create secret generic artifactory-cluster-license --from-file=./art.lic
  3. 通过helm安装:helm install --name artifactory-ha jfrog/artifactory-ha --set artifactory.masterKey=,artifactory.license.secret=artifactory-cluster-license,artifactory.license.dataKey=art.lic

结果:

头盔安装没有抱怨。检查服务似乎没问题,LoadBalancer正在等待并上线。

检查过的PV和PVC,看起来很好并受到约束:

NAME STATUS artifactory-ha-postgresql Bound volume-artifactory-ha-artifactory-ha-member-0 Bound volume-artifactory-ha-artifactory-ha-primary-0 Bound

检查了豆荚,只有postgres准备好了:

NAME READY STATUS RESTARTS AGE artifactory-ha-artifactory-ha-member-0 0/1 Running 0 3m artifactory-ha-artifactory-ha-primary-0 0/1 Running 0 3m artifactory-ha-nginx-697844f76-jt24s 0/1 Init:0/1 0 3m artifactory-ha-postgresql-676999df46-bchq9 1/1 Running 0 3m

等了几分钟,没有变化。等了2个小时,仍处于上述状态。检查了artifactory-ha-artifactory-ha-primary-0吊舱的日志(它很长,但我可以发布,如果这将有助于任何人确定问题),但注意到这个错误:

SEVERE: One or more listeners failed to start. Full details will be found in the appropriate container log file。我想不出还有什么地方可以检查日志。服务正在运行,其他pod似乎正在等待这个主要的pod。

日志继续使用SEVERE: Context [/artifactory] startup failed due to previous errors,然后在“ACCESS”ASCII艺术之后开始喷出Java堆栈转储,像WARNING: The web application [artifactory] appears to have started a thread named [Thread-5] but has failed to stop it. This is very likely to create a memory leak. Stack trace of thread:这样的消息

我最终离开集群过夜了,现在,大约12个小时后,我很惊讶地看到“主要”吊舱确实上线了:

NAME READY STATUS RESTARTS AGE artifactory-ha-artifactory-ha-member-0 1/1 Terminating 0 19m artifactory-ha-artifactory-ha-member-1 0/1 Terminating 0 17m artifactory-ha-artifactory-ha-primary-0 1/1 Running 0 3h artifactory-ha-nginx-697844f76-vsmzq 0/1 Running 38 3h artifactory-ha-postgresql-676999df46-gzbpm 1/1 Running 0 3h

虽然,nginx pod没有。它最终在其init容器命令(until nc -z -w 2 artifactory-ha 8081 && echo artifactory ok; do)成功,但无法通过其准备探测器: Warning Unhealthy 1m (x428 over 3h) kubelet, spczufvthh-worker-1 Readiness probe failed: Get http://10.2.2.45:80/artifactory/webapp/#/login: net/http: request canceled (Client.Timeout exceeded while awaiting headers)

也许我错过了设置或掌舵安装开关中的一些必要步骤?这是我第一次尝试设置jFrog Artifactory HA,我注意到大多数指令似乎是针对裸机群集的,所以也许我对此感到困惑。

任何帮助表示赞赏!

kubernetes artifactory kubernetes-helm
1个回答
0
投票

原来我们弄乱了几件事,并对安装过程的工作方式产生了一些误解。也许这对未来的人们有所帮助。

1)masterKey值至少需要16个字符。我们最初尝试的太短了。我们再次尝试安装并将这个新的masterKey写入秘密,但......

2)秘密中的值似乎在初始安装尝试时被读取一次,然后它们被写入持久卷并在此之后更新秘密似乎没有效果。

3)我们也不了解许可证密钥格式和约束。您需要为将运行Artifactory的每个节点提供许可证,并且所有许可证都放在一个文件中,每个许可证由两个返回/新行分隔。

在这些错误中,错误日志对我们来说非常无益。我们最终消灭了安装,包括PV,最后一切都很顺利。

© www.soinside.com 2019 - 2024. All rights reserved.