Hello. Still struggling with SSL deployment on a private cluster. The cluster is accessible via VPN and a bind server handles my DNS.
Everything seems ok, but I’m getting an unhealthy Target Group and am not sure how to resolve this. Is this likely to be an AWS SG issue or something along those lines?
Kustomize file here
https://pastebin.com/nwBzArrJ
Ingress
https://pastebin.com/bUTwiE5U
For my kustomize file. Do I need to specify host?
Events:
34m Normal SuccessfulCreate replicaset/awx-operator-controller-manager-6c44794dd7 Created pod: awx-operator-controller-manager-6c44794dd7-hqfm2
23m Normal SuccessfulDelete replicaset/awx-operator-controller-manager-6c44794dd7 Deleted pod: awx-operator-controller-manager-6c44794dd7-hqfm2
34m Normal ScalingReplicaSet deployment/awx-operator-controller-manager Scaled up replica set awx-operator-controller-manager-6c44794dd7 to 1
23m Normal ScalingReplicaSet deployment/awx-operator-controller-manager Scaled up replica set awx-operator-controller-manager-699b59cbc9 to 1
23m Normal ScalingReplicaSet deployment/awx-operator-controller-manager Scaled down replica set awx-operator-controller-manager-6c44794dd7 to 0
34m Normal LeaderElection configmap/awx-operator awx-operator-controller-manager-6c44794dd7-hqfm2_6098fcaf-918f-4820-a6ab-74e9b8242a04 became leader
23m Normal LeaderElection configmap/awx-operator awx-operator-controller-manager-699b59cbc9-kc48c_342758e9-5b50-4d0c-afe5-b3eed1e0dee8 became leader
32m Normal Scheduled pod/awx-postgres-0 Successfully assigned awx/awx-postgres-0 to ip-10-5-33-27.us-east-2.compute.internal
32m Normal SuccessfulAttachVolume pod/awx-postgres-0 AttachVolume.Attach succeeded for volume “pvc-fc7023da-ac93-405e-a2c5-acf92f64a4d8”
32m Normal Pulled pod/awx-postgres-0 Container image “quay.io/centos/centos:stream8” already present on machine
32m Normal Created pod/awx-postgres-0 Created container database-check
32m Normal Started pod/awx-postgres-0 Started container database-check
32m Normal Pulled pod/awx-postgres-0 Container image “postgres:12” already present on machine
32m Normal Created pod/awx-postgres-0 Created container postgres
32m Normal Started pod/awx-postgres-0 Started container postgres
32m Normal SuccessfulCreate statefulset/awx-postgres create Claim postgres-awx-postgres-0 Pod awx-postgres-0 in StatefulSet awx-postgres success
32m Normal SuccessfulCreate statefulset/awx-postgres create Pod awx-postgres-0 in StatefulSet awx-postgres successful
32m Normal ScalingReplicaSet deployment/awx Scaled up replica set awx-d75477f8d to 1
22m Normal ScalingReplicaSet deployment/awx Scaled up replica set awx-9798c844b to 1
22m Normal ScalingReplicaSet deployment/awx Scaled down replica set awx-d75477f8d to 0
8m47s Normal SuccessfullyReconciled targetgroupbinding/k8s-awx-awxservi-38382bc6c7 Successfully reconciled
32m Normal WaitForFirstConsumer persistentvolumeclaim/postgres-awx-postgres-0 waiting for first consumer to be created before binding
32m Normal ProvisioningSucceeded persistentvolumeclaim/postgres-awx-postgres-0 Successfully provisioned volume pvc-fc7023da-ac93-405e-a2c5-acf92f64a4d8 using kubernetes.io/aws-ebs
kubectl -n awx get awx,all,ingress,secrets
NAME AGE
awx.awx.ansible.com/awx 33m
NAME READY STATUS RESTARTS AGE
pod/awx-9798c844b-hrtqv 4/4 Running 0 9m44s
pod/awx-operator-controller-manager-699b59cbc9-kc48c 2/2 Running 0 24m
pod/awx-postgres-0 1/1 Running 0 33m
NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE
service/awx-operator-controller-manager-metrics-service ClusterIP 172.20.62.95 8443/TCP 35m
service/awx-postgres ClusterIP None 5432/TCP 33m
service/awx-service ClusterIP 172.20.191.144 80/TCP 33m
NAME READY UP-TO-DATE AVAILABLE AGE
deployment.apps/awx 1/1 1 1 33m
deployment.apps/awx-operator-controller-manager 1/1 1 1 35m
NAME DESIRED CURRENT READY AGE
replicaset.apps/awx-9798c844b 1 1 1 23m
replicaset.apps/awx-d75477f8d 0 0 0 33m
replicaset.apps/awx-operator-controller-manager-699b59cbc9 1 1 1 24m
replicaset.apps/awx-operator-controller-manager-6c44794dd7 0 0 0 35m
NAME READY AGE
statefulset.apps/awx-postgres 1/1 33m
NAME CLASS HOSTS ADDRESS PORTS AGE
ingress.networking.k8s.io/awx-ingress * *******elb.amazonaws.com 80 33m
NAME TYPE DATA AGE
secret/awx-admin-password Opaque 1 35m
secret/awx-app-credentials Opaque 3 33m
secret/awx-broadcast-websocket Opaque 1 33m
secret/awx-operator-controller-manager-token-hw82m kubernetes.io/service-account-token 3 35m
secret/awx-postgres-configuration Opaque 6 35m
secret/awx-secret-key Opaque 1 33m
secret/awx-token-b8hbh kubernetes.io/service-account-token 3 33m
secret/default-token-xn795 kubernetes.io/service-account-token 3 35m