Openshift-ansible: no matches for servicecatalog.k8s.io

[megian]

Version

oc v3.7.0+7ed6862
kubernetes v1.7.6+a08f5eeb62
features: Basic-Auth GSSAPI Kerberos SPNEGO

Server https://master1:8443
openshift v3.7.0+7ed6862
kubernetes v1.7.6+a08f5eeb62
Steps To Reproduce

ansible-playbook -i hosts playbooks/byo/openshift-cluster/service-catalog.yml
Current Result

TASK [ansible_service_broker : Create the Broker resource in the catalog]
fatal: [master1]: FAILED! => {"changed": false, "failed": true, "msg": {"cmd": "/usr/local/bin/oc create -f /tmp/brokerout-2AWk1W -n default", "results": {}, "returncode": 1, "stderr": "error: unable to recognize "/tmp/brokerout-2AWk1W": no matches for servicecatalog.k8s.io/, Kind=ClusterServiceBroker\n", "stdout": ""}}
Expected Result

no error

[micah]

I'm getting the same error, using openshift-ansible branch release-3.7 with latest commit 8e4c88a7ad27107d2fa4741beed0243abba8ff90

here is a -vvvv output:

/ TASK [ansible_service_broker : Create the Broker resource \
\ in the catalog]                                           /

task path: /home/micah/working/openshift-ansible/roles/ansible_service_broker/tasks/install.yml:442
Using module file /home/micah/working/openshift-ansible/roles/lib_openshift/library/oc_obj.py
<atomicmaster.example.net> ESTABLISH SSH CONNECTION FOR USER: root
<atomicmaster.example.net> SSH: EXEC ssh -C -o ControlMaster=auto -o ControlPersist=60s -o Port=4422 -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o User=root -o ConnectTimeout=10 -o ControlPath=/home/micah/.ansible/cp/279685a330 atomicmaster.example.net '/bin/sh -c '"'"'echo ~ && sleep 0'"'"''
<atomicmaster.example.net> (0, '/root\n', '')
<atomicmaster.example.net> ESTABLISH SSH CONNECTION FOR USER: root
<atomicmaster.example.net> SSH: EXEC ssh -C -o ControlMaster=auto -o ControlPersist=60s -o Port=4422 -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o User=root -o ConnectTimeout=10 -o ControlPath=/home/micah/.ansible/cp/279685a330 atomicmaster.example.net '/bin/sh -c '"'"'( umask 77 && mkdir -p "` echo /root/.ansible/tmp/ansible-tmp-1513010713.86-143038576398875 `" && echo ansible-tmp-1513010713.86-143038576398875="` echo /root/.ansible/tmp/ansible-tmp-1513010713.86-143038576398875 `" ) && sleep 0'"'"''
<atomicmaster.example.net> (0, 'ansible-tmp-1513010713.86-143038576398875=/root/.ansible/tmp/ansible-tmp-1513010713.86-143038576398875\n', '')
<atomicmaster.example.net> PUT /tmp/tmpYYxFtn TO /root/.ansible/tmp/ansible-tmp-1513010713.86-143038576398875/oc_obj.py
<atomicmaster.example.net> SSH: EXEC sftp -b - -C -o ControlMaster=auto -o ControlPersist=60s -o Port=4422 -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o User=root -o ConnectTimeout=10 -o ControlPath=/home/micah/.ansible/cp/279685a330 '[atomicmaster.example.net]'
<atomicmaster.example.net> (0, 'sftp> put /tmp/tmpYYxFtn /root/.ansible/tmp/ansible-tmp-1513010713.86-143038576398875/oc_obj.py\n', '')
<atomicmaster.example.net> ESTABLISH SSH CONNECTION FOR USER: root
<atomicmaster.example.net> SSH: EXEC ssh -C -o ControlMaster=auto -o ControlPersist=60s -o Port=4422 -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o User=root -o ConnectTimeout=10 -o ControlPath=/home/micah/.ansible/cp/279685a330 atomicmaster.example.net '/bin/sh -c '"'"'chmod u+x /root/.ansible/tmp/ansible-tmp-1513010713.86-143038576398875/ /root/.ansible/tmp/ansible-tmp-1513010713.86-143038576398875/oc_obj.py && sleep 0'"'"''
<atomicmaster.example.net> (0, '', '')
<atomicmaster.example.net> ESTABLISH SSH CONNECTION FOR USER: root
<atomicmaster.example.net> SSH: EXEC ssh -C -o ControlMaster=auto -o ControlPersist=60s -o Port=4422 -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o User=root -o ConnectTimeout=10 -o ControlPath=/home/micah/.ansible/cp/279685a330 -tt atomicmaster.example.net '/bin/sh -c '"'"'/usr/bin/python /root/.ansible/tmp/ansible-tmp-1513010713.86-143038576398875/oc_obj.py; rm -rf "/root/.ansible/tmp/ansible-tmp-1513010713.86-143038576398875/" > /dev/null 2>&1 && sleep 0'"'"''
<atomicmaster.example.net> (0, '\r\n{"msg": {"returncode": 1, "cmd": "/usr/local/bin/oc create -f /tmp/brokerout-_X4ado -n default", "results": {}, "stderr": "error: unable to recognize \\"/tmp/brokerout-_X4ado\\": no matches for servicecatalog.k8s.io/, Kind=ClusterServiceBroker\\n", "stdout": ""}, "failed": true, "exception": "  File \\"/tmp/ansible_gz_EX7/ansible_module_oc_obj.py\\", line 45, in <module>\\n    import ruamel.yaml as yaml\\n", "invocation": {"module_args": {"files": null, "kind": "ClusterServiceBroker", "force": false, "name": "ansible-service-broker", "all_namespaces": null, "namespace": "default", "delete_after": false, "kubeconfig": "/etc/origin/master/admin.kubeconfig", "content": {"path": "/tmp/brokerout", "data": "apiVersion: servicecatalog.k8s.io/v1beta1\\nkind: ClusterServiceBroker\\nmetadata:\\n  name: ansible-service-broker\\nspec:\\n  authInfo:\\n    bearer:\\n      secretRef:\\n        kind: Secret\\n        name: asb-client\\n        namespace: openshift-ansible-service-broker\\n  caBundle: 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\\n  url: https://asb.openshift-ansible-service-broker.svc:1338/ansible-service-broker\\n"}, "state": "present", "debug": false, "selector": null}}}\r\n', 'Shared connection to atomicmaster.example.net closed.\r\n')
The full traceback is:
  File "/tmp/ansible_gz_EX7/ansible_module_oc_obj.py", line 45, in <module>
    import ruamel.yaml as yaml

fatal: [atomicmaster.example.net]: FAILED! => {
    "changed": false, 
    "failed": true, 
    "invocation": {
        "module_args": {
            "all_namespaces": null, 
            "content": {
                "data": "apiVersion: servicecatalog.k8s.io/v1beta1\nkind: ClusterServiceBroker\nmetadata:\n  name: ansible-service-broker\nspec:\n  authInfo:\n    bearer:\n      secretRef:\n        kind: Secret\n        name: asb-client\n        namespace: openshift-ansible-service-broker\n  caBundle: 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\n  url: https://asb.openshift-ansible-service-broker.svc:1338/ansible-service-broker\n", 
                "path": "/tmp/brokerout"
            }, 
            "debug": false, 
            "delete_after": false, 
            "files": null, 
            "force": false, 
            "kind": "ClusterServiceBroker", 
            "kubeconfig": "/etc/origin/master/admin.kubeconfig", 
            "name": "ansible-service-broker", 
            "namespace": "default", 
            "selector": null, 
            "state": "present"
        }
    }, 
    "msg": {
        "cmd": "/usr/local/bin/oc create -f /tmp/brokerout-_X4ado -n default", 
        "results": {}, 
        "returncode": 1, 
        "stderr": "error: unable to recognize \"/tmp/brokerout-_X4ado\": no matches for servicecatalog.k8s.io/, Kind=ClusterServiceBroker\n", 
        "stdout": ""
    }
}
    to retry, use: --limit @/home/micah/working/openshift-ansible/playbooks/byo/config.retry

[linzhaoming]

I meet the same problem
Download from the release links: openshift-ansible-3.7.15-1

fatal: [centos-51]: FAILED! => {"changed": false, "failed": true, "msg": {"cmd": "/usr/bin/oc create -f /tmp/brokerout-DEb2tC -n default", "results": {}, "returncode": 1, "stderr": "error: unable to recognize \"/tmp/brokerout-DEb2tC\": no matches for servicecatalog.k8s.io/, Kind=ClusterServiceBroker\n", "stdout": ""}}

[linzhaoming]

The cluster is still working, except the ClusterServiceBroker can not register.

When I print the logs of the Pod controller-manager in the project 'kube-service-catalog'
It shows the x509: certificate signed by unknown authorit

[root@centos-51 openshift-3.7]# oc logs -f controller-manager-xgdbp -n kube-service-catalog
I1223 08:40:43.555687       1 feature_gate.go:156] feature gates: map[OriginatingIdentity:true]
I1223 08:40:43.562398       1 leaderelection.go:174] attempting to acquire leader lease...
E1223 08:40:43.602293       1 event.go:260] Could not construct reference to: '&v1.Endpoints{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"service-catalog-controller-manager", GenerateName:"", Namespace:"kube-service-catalog", SelfLink:"/api/v1/namespaces/kube-service-catalog/endpoints/service-catalog-controller-manager", UID:"c1bdde45-e391-11e7-b28f-525400fbc53b", ResourceVersion:"815894", Generation:0, CreationTimestamp:v1.Time{Time:time.Time{sec:63649156881, nsec:0, loc:(*time.Location)(0x25e8400)}}, DeletionTimestamp:(*v1.Time)(nil), DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string{"control-plane.alpha.kubernetes.io/leader":"{\"holderIdentity\":\"controller-manager-xgdbp-external-service-catalog-controller\",\"leaseDurationSeconds\":15,\"acquireTime\":\"2017-12-23T08:23:48Z\",\"renewTime\":\"2017-12-23T08:40:43Z\",\"leaderTransitions\":1}"}, OwnerReferences:[]v1.OwnerReference(nil), Initializers:(*v1.Initializers)(nil), Finalizers:[]string(nil), ClusterName:""}, Subsets:[]v1.EndpointSubset(nil)}' due to: 'no kind is registered for the type v1.Endpoints'. Will not report event: 'Normal' 'LeaderElection' 'controller-manager-xgdbp-external-service-catalog-controller became leader'
I1223 08:40:43.602491       1 leaderelection.go:184] successfully acquired lease kube-service-catalog/service-catalog-controller-manager
F1223 08:40:43.757438       1 controller_manager.go:198] error running controllers: failed to get supported resources from server: unable to retrieve the complete list of server APIs: servicecatalog.k8s.io/v1beta1: an error on the server ("Error: 'x509: certificate signed by unknown authority (possibly because of \"crypto/rsa: verification error\" while trying to verify candidate authority certificate \"service-catalog-signer\")'\nTrying to reach: 'https://172.30.159.10:443/apis/servicecatalog.k8s.io/v1beta1'") has prevented the request from succeeding

I have checked with the ways by https://github.com/openshift/openshift-ansible/issues/3784, and ensure my CA is working.

[linzhaoming]

I solved this problem By disableAnsible Service Broker component the Inventory

ansible_service_broker_install=false

Uninstall and reinstall the openshift in the same environment.

The Service Catalog is installed normally

[bortek]

Same issue here, any progress ?

[megian]

It seams to occur, if there is no StorageClass defined, asb-etcd in the namespace openshift-ansible-service-broker is waiting for permanent storage and does fail. This causes asb to fail and adding the resource is not possible.

[Neikius]

@megian: That doesn't look to be the case with me:

oc project openshift-ansible-service-broker 
Now using project "openshift-ansible-service-broker" on server "https://x:8443".
# oc get pods
NAME               READY     STATUS    RESTARTS   AGE
asb-1-cktjz        1/1       Running   0          27m
asb-etcd-1-tn5vk   1/1       Running   0          27m

oc project kube-service-catalog 
Now using project "kube-service-catalog" on server "https://x:8443".
# oc get pods
NAME                       READY     STATUS             RESTARTS   AGE
apiserver-6hb4d            1/1       Running            0          29m
controller-manager-55dlm   0/1       CrashLoopBackOff   10         29m

Controller-manager has the same logs about certificates being bad...

Template service broker didn't even get installed, possibly it is located down the stream? Previously I had it installed, but somehow a few days ago service-broker died and I removed it&tried to reinstall (multiple errors in all 3 projects).

[davidaah]

I suspect this is related to https://github.com/openshift/openshift-ansible/pull/6687

[jpeeler]

This could be solved by https://github.com/openshift/openshift-ansible/pull/6687. Edit: did not see above comment :)

[fatherlinux]

Looks like #6377 could be the same as https://github.com/openshift/openshift-ansible/issues/7144

[onagano-rh]

Indeed commit 53bd95174 from #6687 fixed the issue for me. Thanks!

[phemmer]

Just throwing in my findings since I also hit this issue, and this is the top google result. For me it was because I'm using the Calico network plugin, and for some reason with ip-ip encapsulation on (which is the default), nodes can't reach service clusterIPs on other nodes. So the ansible service broker pod couldn't reach the etcd service.
Turning ipip encapsulation off (calico_ipv4pool_ipip=off) fixes the issue.

[openshift-bot]

Issues go stale after 90d of inactivity.

Mark the issue as fresh by commenting /remove-lifecycle stale.
Stale issues rot after an additional 30d of inactivity and eventually close.
Exclude this issue from closing by commenting /lifecycle frozen.

If this issue is safe to close now please do so with /close.

/lifecycle stale