Highlighted
Honored Contributor.. Honored Contributor..
Honored Contributor..
106 views

SMAX licence expired - kube-start returns error

Jump to solution

Hi all,

 

Seems the licence in one of the SMAX environments we use expired. Was trying to follow the steps in the documentation but for some reason, when I run kube-start.sh, it returns an error:

# /opt/kubernetes/bin/kube-start.sh

Starting service docker ................................................... Started

Starting service kubelet .................................................. Started

Starting service kube-proxy ............................................... Started

Failed

Failed to get nodes information

 

 

Which log should I look for additional information regarding this error? I'm guessing it might be due to the licences not being valid, but would like to confirm.

 

Also any more detailed information about creation of self-signed certs and applying them in this scenario?

Regards,

J.

0 Likes
1 Solution

Accepted Solutions
Highlighted
Micro Focus Frequent Contributor
Micro Focus Frequent Contributor

Since you are on 2019.05

https://docs.microfocus.com/itom/SMAX:2019.05/ManageCert#Renew_internal_and_external_certificates 

Check the following section:

-Renew certificates after they are expired as root user
-Generate self-signed root CA and certificates
-Convert certificates

In newer versions the renew certificates process it very easy and it is done via the renewCert script

https://docs.microfocus.com/itom/SMAX:2020.02/ManageCert#Renew_internal_and_external_certificates

View solution in original post

6 Replies
Highlighted
Micro Focus Frequent Contributor
Micro Focus Frequent Contributor

you can check the log in 
/opt/kubernetes/log/scripts/kube-start

Highlighted
Honored Contributor.. Honored Contributor..
Honored Contributor..

Hi feugue,

 

Thanks for your reply. I'm getting:

Aug 05 09:00:04 server.domain.com kube-proxy[5586]: E0805 09:00:04.553541    5586 reflector.go:125] k8s.io/client-go/informers/factory.go:132: Failed to list *v1.Endpoints: Get https://server.domain.com:8443/api/v1/endpoints?limit=500&resourceVersion=0: dial tcp 192.168.2.110:8443: connect: connection refused

Then further down the log:

2020-08-05T09:00:08.751666651+01:00 DEBUG exec_cmd # /opt/kubernetes/bin/kubectl get nodes --no-headers

2020-08-05T09:00:08.751666651+01:00 DEBUG exec_msg : The connection to the server server.domain.com:8443 was refused - did you specify the right host or port?

 

I'm guessing it will be due to expired certificates?

Regards,

J.

0 Likes
Highlighted
Micro Focus Frequent Contributor
Micro Focus Frequent Contributor

what is your CFD version ?

check the cert using this command from master node

Navigate to:  /opt/kubernetes/scripts

then run:  ./certCheck -ca /opt/kubernetes/ssl/ca.crt -cert /opt/kubernetes/ssl/server.crt -key /opt/kubernetes/ssl/server.key -host FQDN_OF_MASTER

Highlighted
Honored Contributor.. Honored Contributor..
Honored Contributor..

Feugue,

 

We're running 2019.05.

# ./certCheck -ca /opt/kubernetes/ssl/ca.crt -cert /opt/kubernetes/ssl/server.crt -key /opt/kubernetes/ssl/server.key -host server.domain.com

Server certificate is expired or soon

301

 

Do you have any idea about how to create a new self-signed cert in the correct format and how to update it in CDF?

Regards,

J.

0 Likes
Highlighted
Micro Focus Frequent Contributor
Micro Focus Frequent Contributor

Since you are on 2019.05

https://docs.microfocus.com/itom/SMAX:2019.05/ManageCert#Renew_internal_and_external_certificates 

Check the following section:

-Renew certificates after they are expired as root user
-Generate self-signed root CA and certificates
-Convert certificates

In newer versions the renew certificates process it very easy and it is done via the renewCert script

https://docs.microfocus.com/itom/SMAX:2020.02/ManageCert#Renew_internal_and_external_certificates

View solution in original post

Highlighted
Honored Contributor.. Honored Contributor..
Honored Contributor..

Hi Feugue,

 

Just followed those steps, including the ones described under https://docs.microfocus.com/itom/SMAX:2020.02/ManageCert#Renew_the_internal_certificates_after_they_are_expired

 

At least I can see pods in Error and Pending now, so I'll just wait for the system to recover  🙂

 

Thank you so much for your help!

 

Regards,

J.

0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.