Maximo

 View Only
  • 1.  Mas 9 pipelines UDS and Grafana deployment error

    Posted 27 days ago

    Hi All, using the Non-Interactive option to deploy MAS on ROSA Shared existing cluster, both UDS and Grafana pipelines threw errors

    MAS CLI -V13.0

    UDS Error:

    TASK [ibm.mas_devops.dro : Check if operator group is present in "redhat-marketplace" already] ***
    ok: [localhost] => changed=false 
      api_found: true
      resources: []
     
    TASK [ibm.mas_devops.dro : Create OperatorGroup in redhat-marketplace namespace if not exist] ***
    fatal: [localhost]: FAILED! => changed=false 
      msg: 'Failed to create object: b''{"kind":"Status","apiVersion":"v1","metadata":{},"status":"Failure","message":"admission webhook \\"namespace-validation.managed.openshift.io\\" denied the request: Prevented from accessing Red Hat managed namespaces. Customer workloads should be placed in customer namespaces, and should not match an entry in this list of regular expressions: [^default$ ^openshift$ ^kube-.* ^redhat-.* ^dedicated-admin$ ^openshift-addon-operator$ ^openshift-aqua$ ^openshift-aws-vpce-operator$ ^openshift-backplane$ ^openshift-backplane-cee$ ^openshift-backplane-csa$ ^openshift-backplane-cse$ ^openshift-backplane-csm$ ^openshift-backplane-managed-scripts$ ^openshift-backplane-mobb$ ^openshift-backplane-srep$ ^openshift-backplane-tam$ ^openshift-cloud-ingress-operator$ ^openshift-codeready-workspaces$ ^openshift-compliance$ ^openshift-compliance-monkey$ ^openshift-container-security$ ^openshift-custom-domains-operator$ ^openshift-customer-monitoring$ ^openshift-deployment-validation-operator$
        ^openshift-managed-node-metadata-operator$ ^openshift-file-integrity$ ^openshift-logging$ ^openshift-managed-upgrade-operator$ ^openshift-must-gather-operator$ ^openshift-observability-operator$ ^openshift-ocm-agent-operator$ ^openshift-operators-redhat$ ^openshift-osd-metrics$ ^openshift-rbac-permissions$ ^openshift-route-monitor-operator$ ^openshift-scanning$ ^openshift-security$ ^openshift-splunk-forwarder-operator$ ^openshift-sre-pruning$ ^openshift-suricata$ ^openshift-validation-webhook$ ^openshift-velero$ ^openshift-monitoring$ ^openshift$ ^openshift-cluster-version$ ^goalert$ ^keycloak$ ^configure-goalert-operator$ ^kube-system$ ^openshift-apiserver$ ^openshift-apiserver-operator$ ^openshift-authentication$ ^openshift-authentication-operator$ ^openshift-cloud-controller-manager$ ^openshift-cloud-controller-manager-operator$ ^openshift-cloud-credential-operator$ ^openshift-cloud-network-config-controller$ ^openshift-cluster-api$ ^openshift-cluster-csi-drivers$ ^openshift-cluster-machine-approver$
        ^openshift-cluster-node-tuning-operator$ ^openshift-cluster-samples-operator$ ^openshift-cluster-storage-operator$ ^openshift-config$ ^openshift-config-managed$ ^openshift-config-operator$ ^openshift-console$ ^openshift-console-operator$ ^openshift-console-user-settings$ ^openshift-controller-manager$ ^openshift-controller-manager-operator$ ^openshift-dns$ ^openshift-dns-operator$ ^openshift-etcd$ ^openshift-etcd-operator$ ^openshift-host-network$ ^openshift-image-registry$ ^openshift-ingress$ ^openshift-ingress-canary$ ^openshift-ingress-operator$ ^openshift-insights$ ^openshift-kni-infra$ ^openshift-kube-apiserver$ ^openshift-kube-apiserver-operator$ ^openshift-kube-controller-manager$ ^openshift-kube-controller-manager-operator$ ^openshift-kube-scheduler$ ^openshift-kube-scheduler-operator$ ^openshift-kube-storage-version-migrator$ ^openshift-kube-storage-version-migrator-operator$ ^openshift-machine-api$ ^openshift-machine-config-operator$ ^openshift-marketplace$ ^openshift-monitoring$
        ^openshift-multus$ ^openshift-network-diagnostics$ ^openshift-network-operator$ ^openshift-nutanix-infra$ ^openshift-oauth-apiserver$ ^openshift-openstack-infra$ ^openshift-operator-lifecycle-manager$ ^openshift-operators$ ^openshift-ovirt-infra$ ^openshift-sdn$ ^openshift-ovn-kubernetes$ ^openshift-platform-operators$ ^openshift-route-controller-manager$ ^openshift-service-ca$ ^openshift-service-ca-operator$ ^openshift-user-workload-monitoring$ ^openshift-vsphere-infra$]","reason":"Forbidden","code":403}\n'''
      reason: Forbidden
     
    NO MORE HOSTS LEFT *************************************************************
     
    PLAY RECAP *********************************************************************
    localhost                  : ok=12   changed=0    unreachable=0    failed=1    skipped=0    rescued=0    ignored=0  
    Grafana Error:
     
    TASK [ibm.mas_devops.grafana : install : Wait for grafana v5 to be ready (60s delay)] ***
    FAILED - RETRYING: [localhost]: install : Wait for grafana v5 to be ready (60s delay) (10 retries left).
    FAILED - RETRYING: [localhost]: install : Wait for grafana v5 to be ready (60s delay) (9 retries left).
    FAILED - RETRYING: [localhost]: install : Wait for grafana v5 to be ready (60s delay) (8 retries left).
    FAILED - RETRYING: [localhost]: install : Wait for grafana v5 to be ready (60s delay) (7 retries left).
    FAILED - RETRYING: [localhost]: install : Wait for grafana v5 to be ready (60s delay) (6 retries left).
    FAILED - RETRYING: [localhost]: install : Wait for grafana v5 to be ready (60s delay) (5 retries left).
    FAILED - RETRYING: [localhost]: install : Wait for grafana v5 to be ready (60s delay) (4 retries left).
    FAILED - RETRYING: [localhost]: install : Wait for grafana v5 to be ready (60s delay) (3 retries left).
    FAILED - RETRYING: [localhost]: install : Wait for grafana v5 to be ready (60s delay) (2 retries left).
    FAILED - RETRYING: [localhost]: install : Wait for grafana v5 to be ready (60s delay) (1 retries left).
    fatal: [localhost]: FAILED! => changed=false 
      api_found: true
      attempts: 10
      resources:
      - apiVersion: grafana.integreatly.org/v1beta1
        kind: Grafana

    Thank you!



    ------------------------------
    Siva Kumar
    ------------------------------


  • 2.  RE: Mas 9 pipelines UDS and Grafana deployment error

    Posted 27 days ago

    Hi Siva,

    Have you checked in OCP, whether GRAFANA project was created? If yes, do you see any error there in the PODS in grafana project?



    ------------------------------
    Ritesh Ranjan
    ------------------------------



  • 3.  RE: Mas 9 pipelines UDS and Grafana deployment error

    Posted 27 days ago

    Change the namespace in which DRO is installed. By default it is installed in redhat-marketplace but in ROSA it is not allowed to create namespaces with redhat-* prefix.
    The env variable to control the DRO namespace is DRO_NAMESPACE.



    ------------------------------
    Witold Wierzchowski
    Solution Architect
    Cohesive Poland
    ------------------------------