Maximo

Maximo

Come for answers, stay for best practices. All we're missing is you.

 View Only
  • 1.  Mas 9 pipelines UDS and Grafana deployment error

    Posted Thu January 09, 2025 11:20 PM

    Hi All, using the Non-Interactive option to deploy MAS on ROSA Shared existing cluster, both UDS and Grafana pipelines threw errors

    MAS CLI -V13.0

    UDS Error:

    TASK [ibm.mas_devops.dro : Check if operator group is present in "redhat-marketplace" already] ***
    ok: [localhost] => changed=false 
      api_found: true
      resources: []
     
    TASK [ibm.mas_devops.dro : Create OperatorGroup in redhat-marketplace namespace if not exist] ***
    fatal: [localhost]: FAILED! => changed=false 
      msg: 'Failed to create object: b''{"kind":"Status","apiVersion":"v1","metadata":{},"status":"Failure","message":"admission webhook \\"namespace-validation.managed.openshift.io\\" denied the request: Prevented from accessing Red Hat managed namespaces. Customer workloads should be placed in customer namespaces, and should not match an entry in this list of regular expressions: [^default$ ^openshift$ ^kube-.* ^redhat-.* ^dedicated-admin$ ^openshift-addon-operator$ ^openshift-aqua$ ^openshift-aws-vpce-operator$ ^openshift-backplane$ ^openshift-backplane-cee$ ^openshift-backplane-csa$ ^openshift-backplane-cse$ ^openshift-backplane-csm$ ^openshift-backplane-managed-scripts$ ^openshift-backplane-mobb$ ^openshift-backplane-srep$ ^openshift-backplane-tam$ ^openshift-cloud-ingress-operator$ ^openshift-codeready-workspaces$ ^openshift-compliance$ ^openshift-compliance-monkey$ ^openshift-container-security$ ^openshift-custom-domains-operator$ ^openshift-customer-monitoring$ ^openshift-deployment-validation-operator$
        ^openshift-managed-node-metadata-operator$ ^openshift-file-integrity$ ^openshift-logging$ ^openshift-managed-upgrade-operator$ ^openshift-must-gather-operator$ ^openshift-observability-operator$ ^openshift-ocm-agent-operator$ ^openshift-operators-redhat$ ^openshift-osd-metrics$ ^openshift-rbac-permissions$ ^openshift-route-monitor-operator$ ^openshift-scanning$ ^openshift-security$ ^openshift-splunk-forwarder-operator$ ^openshift-sre-pruning$ ^openshift-suricata$ ^openshift-validation-webhook$ ^openshift-velero$ ^openshift-monitoring$ ^openshift$ ^openshift-cluster-version$ ^goalert$ ^keycloak$ ^configure-goalert-operator$ ^kube-system$ ^openshift-apiserver$ ^openshift-apiserver-operator$ ^openshift-authentication$ ^openshift-authentication-operator$ ^openshift-cloud-controller-manager$ ^openshift-cloud-controller-manager-operator$ ^openshift-cloud-credential-operator$ ^openshift-cloud-network-config-controller$ ^openshift-cluster-api$ ^openshift-cluster-csi-drivers$ ^openshift-cluster-machine-approver$
        ^openshift-cluster-node-tuning-operator$ ^openshift-cluster-samples-operator$ ^openshift-cluster-storage-operator$ ^openshift-config$ ^openshift-config-managed$ ^openshift-config-operator$ ^openshift-console$ ^openshift-console-operator$ ^openshift-console-user-settings$ ^openshift-controller-manager$ ^openshift-controller-manager-operator$ ^openshift-dns$ ^openshift-dns-operator$ ^openshift-etcd$ ^openshift-etcd-operator$ ^openshift-host-network$ ^openshift-image-registry$ ^openshift-ingress$ ^openshift-ingress-canary$ ^openshift-ingress-operator$ ^openshift-insights$ ^openshift-kni-infra$ ^openshift-kube-apiserver$ ^openshift-kube-apiserver-operator$ ^openshift-kube-controller-manager$ ^openshift-kube-controller-manager-operator$ ^openshift-kube-scheduler$ ^openshift-kube-scheduler-operator$ ^openshift-kube-storage-version-migrator$ ^openshift-kube-storage-version-migrator-operator$ ^openshift-machine-api$ ^openshift-machine-config-operator$ ^openshift-marketplace$ ^openshift-monitoring$
        ^openshift-multus$ ^openshift-network-diagnostics$ ^openshift-network-operator$ ^openshift-nutanix-infra$ ^openshift-oauth-apiserver$ ^openshift-openstack-infra$ ^openshift-operator-lifecycle-manager$ ^openshift-operators$ ^openshift-ovirt-infra$ ^openshift-sdn$ ^openshift-ovn-kubernetes$ ^openshift-platform-operators$ ^openshift-route-controller-manager$ ^openshift-service-ca$ ^openshift-service-ca-operator$ ^openshift-user-workload-monitoring$ ^openshift-vsphere-infra$]","reason":"Forbidden","code":403}\n'''
      reason: Forbidden
     
    NO MORE HOSTS LEFT *************************************************************
     
    PLAY RECAP *********************************************************************
    localhost                  : ok=12   changed=0    unreachable=0    failed=1    skipped=0    rescued=0    ignored=0  
    Grafana Error:
     
    TASK [ibm.mas_devops.grafana : install : Wait for grafana v5 to be ready (60s delay)] ***
    FAILED - RETRYING: [localhost]: install : Wait for grafana v5 to be ready (60s delay) (10 retries left).
    FAILED - RETRYING: [localhost]: install : Wait for grafana v5 to be ready (60s delay) (9 retries left).
    FAILED - RETRYING: [localhost]: install : Wait for grafana v5 to be ready (60s delay) (8 retries left).
    FAILED - RETRYING: [localhost]: install : Wait for grafana v5 to be ready (60s delay) (7 retries left).
    FAILED - RETRYING: [localhost]: install : Wait for grafana v5 to be ready (60s delay) (6 retries left).
    FAILED - RETRYING: [localhost]: install : Wait for grafana v5 to be ready (60s delay) (5 retries left).
    FAILED - RETRYING: [localhost]: install : Wait for grafana v5 to be ready (60s delay) (4 retries left).
    FAILED - RETRYING: [localhost]: install : Wait for grafana v5 to be ready (60s delay) (3 retries left).
    FAILED - RETRYING: [localhost]: install : Wait for grafana v5 to be ready (60s delay) (2 retries left).
    FAILED - RETRYING: [localhost]: install : Wait for grafana v5 to be ready (60s delay) (1 retries left).
    fatal: [localhost]: FAILED! => changed=false 
      api_found: true
      attempts: 10
      resources:
      - apiVersion: grafana.integreatly.org/v1beta1
        kind: Grafana

    Thank you!



    ------------------------------
    Siva Kumar
    ------------------------------


  • 2.  RE: Mas 9 pipelines UDS and Grafana deployment error

    Posted Fri January 10, 2025 01:12 AM

    Hi Siva,

    Have you checked in OCP, whether GRAFANA project was created? If yes, do you see any error there in the PODS in grafana project?



    ------------------------------
    Ritesh Ranjan
    ------------------------------



  • 3.  RE: Mas 9 pipelines UDS and Grafana deployment error

    Posted Fri January 10, 2025 03:03 AM

    Change the namespace in which DRO is installed. By default it is installed in redhat-marketplace but in ROSA it is not allowed to create namespaces with redhat-* prefix.
    The env variable to control the DRO namespace is DRO_NAMESPACE.



    ------------------------------
    Witold Wierzchowski
    Solution Architect
    Cohesive Poland
    ------------------------------