Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Conjur pod restart fails following auto account create #119

Closed
1 of 3 tasks
diverdane opened this issue Dec 21, 2020 · 0 comments · Fixed by #121
Closed
1 of 3 tasks

Conjur pod restart fails following auto account create #119

diverdane opened this issue Dec 21, 2020 · 0 comments · Fixed by #121

Comments

@diverdane
Copy link
Contributor

diverdane commented Dec 21, 2020

Summary

When a Conjur cluster is Helm installed using the auto account create feature e.g. with this chart setting:

    --set account.create=true

and then the Conjur server pod crashes before any helm install ... operation has been done,
then the Conjur pod will continually crash and restart:

$ kubectl get pods
NAME                          READY   STATUS             RESTARTS   AGE
conjur-oss-555f6b6f6b-bms88   1/2     CrashLoopBackOff   1          19s
conjur-oss-postgres-0         1/1     Running            0          103s
$

When this occurs, the Conjur server logs show
an error similar to the following:

Account 'default' already exists
error: exit

Steps to Reproduce

Steps to reproduce the behavior:

  1. Helm install a Conjur-OSS cluster using the --set account.create=true command line argument.
  2. Get the Conjur pod name with kubectl get pods -n <conjur-namespace>
  3. Reset the Conjur pod with kubectl delete pod -n <conjur-namespace> <conjur-pod-name>
  4. Use kubectl get pods -n <conjur-namespace> and see that Conjur pod is continually crashing and restarting.
  5. View Conjur server logs with kubectl logs -n <conjur-namespace> <conjur-pod-name> conjur-oss.

Expected Results

A clear and concise description of what you expected to happen.

Actual Results (including error logs, if applicable)

Restarting the Conjur pod manually should bring up the server successfully, with no crashes.

Reproducible

  • Always
  • Sometimes
  • Non-Reproducible

Version/Tag number

Version 2.0.2

Environment setup

Any Kubernetes platform.

Additional Information

diverdane pushed a commit that referenced this issue Dec 23, 2020
This change eliminates continual, never-ending Conjur pod crashes that
occur if a Conjur cluster is Helm installed with the automatic Conjur account
creation feature enabled (e.g. with `--set account.create=true`), and then
the Conjur pod gets restarted for any reason before a Helm upgrade has been
performed.

Addresses Issue #119
diverdane pushed a commit that referenced this issue Dec 23, 2020
This change eliminates continual, never-ending Conjur pod crashes that
occur if a Conjur cluster is Helm installed with the automatic Conjur account
creation feature enabled (e.g. with `--set account.create=true`), and then
the Conjur pod gets restarted for any reason before a Helm upgrade has been
performed.

Addresses Issue #119
diverdane pushed a commit that referenced this issue Dec 28, 2020
This change eliminates continual, never-ending Conjur pod crashes that
occur if a Conjur cluster is Helm installed with the automatic Conjur account
creation feature enabled (e.g. with `--set account.create=true`), and then
the Conjur pod gets restarted for any reason before a Helm upgrade has been
performed.

Addresses Issue #119
diverdane pushed a commit that referenced this issue Dec 28, 2020
This change eliminates continual, never-ending Conjur pod crashes that
occur if a Conjur cluster is Helm installed with the automatic Conjur account
creation feature enabled (e.g. with `--set account.create=true`), and then
the Conjur pod gets restarted for any reason before a Helm upgrade has been
performed.

Addresses Issue #119
diverdane pushed a commit that referenced this issue Dec 28, 2020
This change eliminates continual, never-ending Conjur pod crashes that
occur if a Conjur cluster is Helm installed with the automatic Conjur account
creation feature enabled (e.g. with `--set account.create=true`), and then
the Conjur pod gets restarted for any reason before a Helm upgrade has been
performed.

Addresses Issue #119
diverdane pushed a commit that referenced this issue Dec 29, 2020
This change eliminates continual, never-ending Conjur pod crashes that
occur if a Conjur cluster is Helm installed with the automatic Conjur account
creation feature enabled (e.g. with `--set account.create=true`), and then
the Conjur pod gets restarted for any reason before a Helm upgrade has been
performed.

Addresses Issue #119
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Development

Successfully merging a pull request may close this issue.

1 participant