https://flyte.org logo
e

Endre Karlson

12/21/2021, 10:40 AM
Hi all! 🙂 Trying to start a flyte sandbox locally with the command from the Guide but getting
Copy code
+-------------------------------------+---------+-----------+
|               SERVICE               | STATUS  | NAMESPACE |
+-------------------------------------+---------+-----------+
| flyte-contour-contour-certgen-xggqx | Pending | flyte     |
+-------------------------------------+---------+-----------+
^ it's just stuck there
y

Yuvraj

12/21/2021, 10:42 AM
please provide the docker logs by running
docker logs -f flyte-sandbox
e

Endre Karlson

12/21/2021, 10:43 AM
Copy code
Starting Docker daemon...
Done.
Starting k3s cluster...
Done.
Deploying Flyte...
"flyteorg" already exists with the same configuration, skipping
Release "flyte" does not exist. Installing it now.
W1221 10:37:37.573128     711 warnings.go:70] <http://apiextensions.k8s.io/v1beta1|apiextensions.k8s.io/v1beta1> CustomResourceDefinition is deprecated in v1.16+, unavailable in v1.22+; use <http://apiextensions.k8s.io/v1|apiextensions.k8s.io/v1> CustomResourceDefinition
W1221 10:37:37.710781     711 warnings.go:70] <http://apiextensions.k8s.io/v1beta1|apiextensions.k8s.io/v1beta1> CustomResourceDefinition is deprecated in v1.16+, unavailable in v1.22+; use <http://apiextensions.k8s.io/v1|apiextensions.k8s.io/v1> CustomResourceDefinition
W1221 10:37:37.796735     711 warnings.go:70] <http://apiextensions.k8s.io/v1beta1|apiextensions.k8s.io/v1beta1> CustomResourceDefinition is deprecated in v1.16+, unavailable in v1.22+; use <http://apiextensions.k8s.io/v1|apiextensions.k8s.io/v1> CustomResourceDefinition
W1221 10:37:39.848164     711 warnings.go:70] <http://apiextensions.k8s.io/v1beta1|apiextensions.k8s.io/v1beta1> CustomResourceDefinition is deprecated in v1.16+, unavailable in v1.22+; use <http://apiextensions.k8s.io/v1|apiextensions.k8s.io/v1> CustomResourceDefinition
W1221 10:37:39.887078     711 warnings.go:70] <http://apiextensions.k8s.io/v1beta1|apiextensions.k8s.io/v1beta1> CustomResourceDefinition is deprecated in v1.16+, unavailable in v1.22+; use <http://apiextensions.k8s.io/v1|apiextensions.k8s.io/v1> CustomResourceDefinition
W1221 10:37:41.510741     711 warnings.go:70] <http://apiextensions.k8s.io/v1beta1|apiextensions.k8s.io/v1beta1> CustomResourceDefinition is deprecated in v1.16+, unavailable in v1.22+; use <http://apiextensions.k8s.io/v1|apiextensions.k8s.io/v1> CustomResourceDefinition
W1221 10:37:41.519421     711 warnings.go:70] <http://rbac.authorization.k8s.io/v1beta1|rbac.authorization.k8s.io/v1beta1> ClusterRoleBinding is deprecated in v1.17+, unavailable in v1.22+; use <http://rbac.authorization.k8s.io/v1|rbac.authorization.k8s.io/v1> ClusterRoleBinding
W1221 10:37:41.520570     711 warnings.go:70] <http://rbac.authorization.k8s.io/v1beta1|rbac.authorization.k8s.io/v1beta1> ClusterRoleBinding is deprecated in v1.17+, unavailable in v1.22+; use <http://rbac.authorization.k8s.io/v1|rbac.authorization.k8s.io/v1> ClusterRoleBinding
W1221 10:37:41.550850     711 warnings.go:70] batch/v1beta1 CronJob is deprecated in v1.21+, unavailable in v1.25+; use batch/v1 CronJob
W1221 10:37:41.551974     711 warnings.go:70] <http://networking.k8s.io/v1beta1|networking.k8s.io/v1beta1> Ingress is deprecated in v1.19+, unavailable in v1.22+; use <http://networking.k8s.io/v1|networking.k8s.io/v1> Ingress
Error: failed pre-install: timed out waiting for the condition
y

Yuvraj

12/21/2021, 10:46 AM
Please also check the deployment status by running
flytectl sandbox exec -- k3s kubectl get pods -n flyte
e

Endre Karlson

12/21/2021, 10:49 AM
yeah seems it's having a problem running from within the dind env
Copy code
Name:           flyte-contour-contour-certgen-h4mfr
Namespace:      flyte
Priority:       0
Node:           40751b01d56d/172.17.0.2
Start Time:     Tue, 21 Dec 2021 10:48:17 +0000
Labels:         <http://app.kubernetes.io/component=contour-certgen|app.kubernetes.io/component=contour-certgen>
                <http://app.kubernetes.io/instance=flyte|app.kubernetes.io/instance=flyte>
                <http://app.kubernetes.io/managed-by=Helm|app.kubernetes.io/managed-by=Helm>
                <http://app.kubernetes.io/name=contour|app.kubernetes.io/name=contour>
                controller-uid=d0f0c8ba-a03f-4a7c-8102-0083bf9a627d
                <http://helm.sh/chart=contour-4.1.2|helm.sh/chart=contour-4.1.2>
                job-name=flyte-contour-contour-certgen
Annotations:    <none>
Status:         Pending
IP:             
IPs:            <none>
Controlled By:  Job/flyte-contour-contour-certgen
Containers:
  contour:
    Container ID:  
    Image:         <http://docker.io/bitnami/contour:1.12.0-debian-10-r0|docker.io/bitnami/contour:1.12.0-debian-10-r0>
    Image ID:      
    Port:          <none>
    Host Port:     <none>
    Command:
      contour
    Args:
      certgen
      --kube
      --incluster
      --overwrite
      --secrets-format=compact
      --namespace=$(CONTOUR_NAMESPACE)
    State:          Waiting
      Reason:       ContainerCreating
    Ready:          False
    Restart Count:  0
    Limits:
      cpu:     100m
      memory:  100Mi
    Requests:
      cpu:     10m
      memory:  50Mi
    Environment:
      CONTOUR_NAMESPACE:  flyte (v1:metadata.namespace)
    Mounts:
      /var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-fp7m2 (ro)
Conditions:
  Type              Status
  Initialized       True 
  Ready             False 
  ContainersReady   False 
  PodScheduled      True 
Volumes:
  kube-api-access-fp7m2:
    Type:                    Projected (a volume that contains injected data from multiple sources)
    TokenExpirationSeconds:  3607
    ConfigMapName:           kube-root-ca.crt
    ConfigMapOptional:       <nil>
    DownwardAPI:             true
QoS Class:                   Burstable
Node-Selectors:              <none>
Tolerations:                 <http://node.kubernetes.io/not-ready:NoExecute|node.kubernetes.io/not-ready:NoExecute> op=Exists for 300s
                             <http://node.kubernetes.io/unreachable:NoExecute|node.kubernetes.io/unreachable:NoExecute> op=Exists for 300s
Events:
  Type     Reason                  Age                From               Message
  ----     ------                  ----               ----               -------
  Normal   Scheduled               45s                default-scheduler  Successfully assigned flyte/flyte-contour-contour-certgen-h4mfr to 40751b01d56d
  Warning  FailedCreatePodSandBox  13s (x2 over 36s)  kubelet            Failed to create pod sandbox: rpc error: code = Unknown desc = failed pulling image "rancher/pause:3.1": Error response from daemon: Get "<https://registry-1.docker.io/v2/>": net/http: TLS handshake timeout
y

Yuvraj

12/21/2021, 10:52 AM
you are not able to pull images from docker registry that's why it's failing.
e

Endre Karlson

12/21/2021, 10:57 AM
Copy code
flytectl sandbox exec -- curl <https://docker.io> -vvv                                                             ✘ INT task 4 11:56:19
*   Trying 34.193.45.8:443...
* Connected to <http://docker.io|docker.io> (34.193.45.8) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
*  CAfile: /etc/ssl/certs/ca-certificates.crt
*  CApath: none
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
^C
yeah that seems like a docker issue indeed 😐
10 Views