seems your router is running on default namespace, your pods are also running 
on namespace default?


> El 3 mar 2016, a las 7:58, Dean Peterson <peterson.d...@gmail.com> escribió:
> 
> I did do an "oc edit scc privileged" and made sure this was at the end:
> 
> users:
> - system:serviceaccount:openshift-infra:build-controller
> - system:serviceaccount:management-infra:management-admin
> - system:serviceaccount:default:router
> - system:serviceaccount:default:registry
> 
> router has always been a privileged user service account.
> 
> On Thu, Mar 3, 2016 at 12:55 AM, Ram Ranganathan <rrang...@redhat.com 
> <mailto:rrang...@redhat.com>> wrote:
> So you have no app level backends in that gist (haproxy.config file). That 
> would explain the 503s - there's nothing there for haproxy to route to.  Most 
> likely its due to the router service account has no permissions to get the 
> routes/endpoints info from etcd. 
> Check that the router service account (router default or whatever service 
> account you used to start the router) is
> part of the privileged SCC and has read permissions to etcd.
> 
> 
> On Wed, Mar 2, 2016 at 10:43 PM, Dean Peterson <peterson.d...@gmail.com 
> <mailto:peterson.d...@gmail.com>> wrote:
> I created a public gist from the output: 
> https://gist.github.com/deanpeterson/76aa9abf2c7fa182b56c 
> <https://gist.github.com/deanpeterson/76aa9abf2c7fa182b56c>
> 
> On Thu, Mar 3, 2016 at 12:35 AM, Ram Ranganathan <rrang...@redhat.com 
> <mailto:rrang...@redhat.com>> wrote:
> You shouldn't need to restart the router. It should have created a new 
> deployment and redeployed the router. 
> So looks like the cause for your 503 errors is something else.
> 
> Can you check that your haproxy.config file is correct (has the correct 
> backends and servers). 
> Either nsenter into your router docker container and cat the file or 
> then run:  
>     oc exec <router-pod-name> cat /var/lib/haproxy/conf/haproxy.config    #  
> router-pod-name as shown in oc get pods
> 
> Ram//
> 
> On Wed, Mar 2, 2016 at 10:10 PM, Dean Peterson <peterson.d...@gmail.com 
> <mailto:peterson.d...@gmail.com>> wrote:
> I ran that "oc env dc router RELOAD_INTERVAL=5s" but I still get the 503 
> error.  Do I need to restart anything?
> 
> On Wed, Mar 2, 2016 at 11:47 PM, Ram Ranganathan <rrang...@redhat.com 
> <mailto:rrang...@redhat.com>> wrote:
> Dean, we did have a recent change to coalesce router reloads (default is 0s) 
> and it looks like with that default we are more aggressive with the reloads 
> which could be causing this problem.   
> 
> Could you please try setting an environment variable ala: 
>     oc env dc router RELOAD_INTERVAL=5s    
>        #  or even 2s or 3s  - that's reload interval in seconds btw
>        # if you have a custom deployment config then replace the dc name 
> router to that deployment config name.
> 
> and see if that helps.
> 
> 
> On Wed, Mar 2, 2016 at 6:21 PM, Dean Peterson <peterson.d...@gmail.com 
> <mailto:peterson.d...@gmail.com>> wrote:
> Is there another place I can look to track down the problem?  The router logs 
> don't say much, just: " Router is including routes in all namespaces"
> 
> On Wed, Mar 2, 2016 at 7:39 PM, Dean Peterson <peterson.d...@gmail.com 
> <mailto:peterson.d...@gmail.com>> wrote:
> All it says is: " Router is including routes in all namespaces"  That's it.
> 
> On Wed, Mar 2, 2016 at 7:38 PM, Clayton Coleman <ccole...@redhat.com 
> <mailto:ccole...@redhat.com>> wrote:
> What do the router logs say?
> 
> On Mar 2, 2016, at 7:43 PM, Dean Peterson <peterson.d...@gmail.com 
> <mailto:peterson.d...@gmail.com>> wrote:
> 
>> This is as close to having openshift origin set up perfectly as I have 
>> gotten.  My builds work great, container deployments always work now.  I 
>> thought I was finally going to have a smooth running Openshift; I just need 
>> to get past this last router issue.  It makes little sense.  I have set up a 
>> router many times before and never had this issue.  I've had issues with 
>> other parts of the system but never the router. 
>> 
>> On Wed, Mar 2, 2016 at 6:34 PM, Dean Peterson <peterson.d...@gmail.com 
>> <mailto:peterson.d...@gmail.com>> wrote:
>> I have a number of happy pods.  They are all running normally.
>> 
>> On Wed, Mar 2, 2016 at 6:28 PM, Mohamed Lrhazi 
>> <mohamed.lrh...@georgetown.edu <mailto:mohamed.lrh...@georgetown.edu>> wrote:
>> Click on a pod and get to its log and events tabs.... see if they are 
>> actually happy or stuck on something...
>> 
>> On Wed, Mar 2, 2016 at 7:03 PM, Dean Peterson <peterson.d...@gmail.com 
>> <mailto:peterson.d...@gmail.com>> wrote:
>> I have successfully started the ha proxy router.  I have a pod running, yet 
>> all my routes take me to a 503 service unavailable error page.  I updated my 
>> resolv.conf file to have my master ip as nameserver; I've never had this 
>> problem on previous versions.  I installed openshift origin 1.1.3 with 
>> ansible; everything seems to be running smoothly like before but I just get 
>> 503 service unavailable errors trying to visit any route.
>> 
>> _______________________________________________
>> users mailing list
>> users@lists.openshift.redhat.com <mailto:users@lists.openshift.redhat.com>
>> http://lists.openshift.redhat.com/openshiftmm/listinfo/users 
>> <http://lists.openshift.redhat.com/openshiftmm/listinfo/users>
>> 
>> 
>> 
>> 
>> _______________________________________________
>> users mailing list
>> users@lists.openshift.redhat.com <mailto:users@lists.openshift.redhat.com>
>> http://lists.openshift.redhat.com/openshiftmm/listinfo/users 
>> <http://lists.openshift.redhat.com/openshiftmm/listinfo/users>
> 
> 
> 
> _______________________________________________
> users mailing list
> users@lists.openshift.redhat.com <mailto:users@lists.openshift.redhat.com>
> http://lists.openshift.redhat.com/openshiftmm/listinfo/users 
> <http://lists.openshift.redhat.com/openshiftmm/listinfo/users>
> 
> 
> 
> 
> -- 
> Ram//
> main(O,s){s=--O;10<putchar(3^O?97-(15&7183>>4*s)*(O++?-1:1):10)&&\
> main(++O,s++);}
> 
> 
> 
> 
> -- 
> Ram//
> main(O,s){s=--O;10<putchar(3^O?97-(15&7183>>4*s)*(O++?-1:1):10)&&\
> main(++O,s++);}
> 
> 
> 
> 
> -- 
> Ram//
> main(O,s){s=--O;10<putchar(3^O?97-(15&7183>>4*s)*(O++?-1:1):10)&&\
> main(++O,s++);}
> 
> _______________________________________________
> users mailing list
> users@lists.openshift.redhat.com
> http://lists.openshift.redhat.com/openshiftmm/listinfo/users

_______________________________________________
users mailing list
users@lists.openshift.redhat.com
http://lists.openshift.redhat.com/openshiftmm/listinfo/users

Reply via email to