replicatedhq / gatekeeper Goto Github PK
View Code? Open in Web Editor NEWKubernetes Operator to manage Dynamic Admission Controllers using Open Policy Agent
License: Apache License 2.0
gatekeeper's People
Contributors
Stargazers
Watchers
gatekeeper's Issues
panic when deploying a new policy
It retried and works still, but:
[gatekeeper-5bc8996876-wn7pk gatekeeper] http2: panic serving 192.168.65.3:47370: runtime error: invalid memory address or nilpointer dereference
[gatekeeper-5bc8996876-wn7pk gatekeeper] goroutine 336 [running]:
[gatekeeper-5bc8996876-wn7pk gatekeeper] net/http.(*http2serverConn).runHandler.func1(0xc4203b6508, 0xc420643faf, 0xc4200d0000)
[gatekeeper-5bc8996876-wn7pk gatekeeper] /usr/local/go/src/net/http/h2_bundle.go:5753 +0x190
[gatekeeper-5bc8996876-wn7pk gatekeeper] panic(0x12aa5e0, 0x1da2db0)
[gatekeeper-5bc8996876-wn7pk gatekeeper] /usr/local/go/src/runtime/panic.go:502 +0x229
[gatekeeper-5bc8996876-wn7pk gatekeeper] github.com/replicatedhq/gatekeeper/pkg/proxy.GatekeeperProxy.AdmissionRequest(0xc42032a100, 0x1576c20, 0xc42032ac00, 0x15acdc0, 0xc4201784b0, 0xc4203400b0)
[gatekeeper-5bc8996876-wn7pk gatekeeper] /go/src/github.com/replicatedhq/gatekeeper/pkg/proxy/server.go:157 +0x119d
[gatekeeper-5bc8996876-wn7pk gatekeeper] github.com/replicatedhq/gatekeeper/pkg/proxy.(GatekeeperProxy).AdmissionRequest-fm(0xc4203400b0)
[gatekeeper-5bc8996876-wn7pk gatekeeper] /go/src/github.com/replicatedhq/gatekeeper/pkg/proxy/server.go:69 +0x56
[gatekeeper-5bc8996876-wn7pk gatekeeper] github.com/replicatedhq/gatekeeper/vendor/github.com/gin-gonic/gin.(*Context).Next(0xc4203400b0)
[gatekeeper-5bc8996876-wn7pk gatekeeper] /go/src/github.com/replicatedhq/gatekeeper/vendor/github.com/gin-gonic/gin/context.go:108 +0x43
[gatekeeper-5bc8996876-wn7pk gatekeeper] github.com/replicatedhq/gatekeeper/vendor/github.com/gin-gonic/gin.(*Engine).handleHTTPRequest(0xc4200c5320, 0xc4203400b0)
[gatekeeper-5bc8996876-wn7pk gatekeeper] /go/src/github.com/replicatedhq/gatekeeper/vendor/github.com/gin-gonic/gin/gin.go:361 +0x586
[gatekeeper-5bc8996876-wn7pk gatekeeper] github.com/replicatedhq/gatekeeper/vendor/github.com/gin-gonic/gin.(*Engine).ServeHTTP(0xc4200c5320, 0x158f400, 0xc4203b6508, 0xc4203e5900)
[gatekeeper-5bc8996876-wn7pk gatekeeper] /go/src/github.com/replicatedhq/gatekeeper/vendor/github.com/gin-gonic/gin/gin.go:326 +0x153
[gatekeeper-5bc8996876-wn7pk gatekeeper] net/http.serverHandler.ServeHTTP(0xc4201d8f70, 0x158f400, 0xc4203b6508, 0xc4203e5900)
[gatekeeper-5bc8996876-wn7pk gatekeeper] /usr/local/go/src/net/http/server.go:2694 +0xbc
[gatekeeper-5bc8996876-wn7pk gatekeeper] net/http.initNPNRequest.ServeHTTP(0xc420104000, 0xc4201d8f70, 0x158f400, 0xc4203b6508, 0xc4203e5900)
[gatekeeper-5bc8996876-wn7pk gatekeeper] /usr/local/go/src/net/http/server.go:3260 +0x9a
[gatekeeper-5bc8996876-wn7pk gatekeeper] net/http.(Handler).ServeHTTP-fm(0x158f400, 0xc4203b6508, 0xc4203e5900)
[gatekeeper-5bc8996876-wn7pk gatekeeper] /usr/local/go/src/net/http/h2_bundle.go:5475 +0x4d
[gatekeeper-5bc8996876-wn7pk gatekeeper] net/http.(*http2serverConn).runHandler(0xc4200d0000, 0xc4203b6508, 0xc4203e5900, 0xc4203b5ba0)
[gatekeeper-5bc8996876-wn7pk gatekeeper] /usr/local/go/src/net/http/h2_bundle.go:5760 +0x89
[gatekeeper-5bc8996876-wn7pk gatekeeper] created by net/http.(*http2serverConn).processHeaders
[gatekeeper-5bc8996876-wn7pk gatekeeper] /usr/local/go/src/net/http/h2_bundle.go:5494 +0x46b
[gatekeeper-5bc8996876-wn7pk gatekeeper] ts=2018-11-27T00:00:36.4596327Z caller=github.com/replicatedhq/gatekeeper/pkg/proxy/server.go level=warn method=GatekeeperProxy.AdmissionRequest event="send request upstream" err="Post https://gatekeeper-opa.gatekeeper-system.svc: net/http: request canceled while waiting for connection (Client.Timeout exceeded while awaiting headers)"
[gatekeeper-5bc8996876-wn7pk gatekeeper] ts=2018-11-27T00:00:36.7319066Z caller=github.com/replicatedhq/gatekeeper/pkg/proxy/server.go level=warn method=GatekeeperProxy.AdmissionRequest event="send request upstream" err="Post https://gatekeeper-opa.gatekeeper-system.svc: net/http: request canceled while waiting for connection (Client.Timeout exceeded while awaiting headers)"
[gatekeeper-5bc8996876-wn7pk gatekeeper] http2: panic serving 192.168.65.3:47370: runtime error: invalid memory address or nilpointer dereference
[gatekeeper-5bc8996876-wn7pk gatekeeper] goroutine 394 [running]:
[gatekeeper-5bc8996876-wn7pk gatekeeper] net/http.(*http2serverConn).runHandler.func1(0xc4204a2158, 0xc420643faf, 0xc4200d0000)
[gatekeeper-5bc8996876-wn7pk gatekeeper] /usr/local/go/src/net/http/h2_bundle.go:5753 +0x190
[gatekeeper-5bc8996876-wn7pk gatekeeper] panic(0x12aa5e0, 0x1da2db0)
[gatekeeper-5bc8996876-wn7pk gatekeeper] /usr/local/go/src/runtime/panic.go:502 +0x229
[gatekeeper-5bc8996876-wn7pk gatekeeper] github.com/replicatedhq/gatekeeper/pkg/proxy.GatekeeperProxy.AdmissionRequest(0xc42032a100, 0x1576c20, 0xc42032ac00, 0x15acdc0, 0xc4201784b0, 0xc420340160)
[gatekeeper-5bc8996876-wn7pk gatekeeper] /go/src/github.com/replicatedhq/gatekeeper/pkg/proxy/server.go:157 +0x119d
[gatekeeper-5bc8996876-wn7pk gatekeeper] github.com/replicatedhq/gatekeeper/pkg/proxy.(GatekeeperProxy).AdmissionRequest-fm(0xc420340160)
[gatekeeper-5bc8996876-wn7pk gatekeeper] /go/src/github.com/replicatedhq/gatekeeper/pkg/proxy/server.go:69 +0x56
[gatekeeper-5bc8996876-wn7pk gatekeeper] github.com/replicatedhq/gatekeeper/vendor/github.com/gin-gonic/gin.(*Context).Next(0xc420340160)
[gatekeeper-5bc8996876-wn7pk gatekeeper] /go/src/github.com/replicatedhq/gatekeeper/vendor/github.com/gin-gonic/gin/context.go:108 +0x43
[gatekeeper-5bc8996876-wn7pk gatekeeper] github.com/replicatedhq/gatekeeper/vendor/github.com/gin-gonic/gin.(*Engine).handleHTTPRequest(0xc4200c5320, 0xc420340160)
[gatekeeper-5bc8996876-wn7pk gatekeeper] /go/src/github.com/replicatedhq/gatekeeper/vendor/github.com/gin-gonic/gin/gin.go:361 +0x586
[gatekeeper-5bc8996876-wn7pk gatekeeper] github.com/replicatedhq/gatekeeper/vendor/github.com/gin-gonic/gin.(*Engine).ServeHTTP(0xc4200c5320, 0x158f400, 0xc4204a2158, 0xc4205d2800)
[gatekeeper-5bc8996876-wn7pk gatekeeper] /go/src/github.com/replicatedhq/gatekeeper/vendor/github.com/gin-gonic/gin/gin.go:326 +0x153
[gatekeeper-5bc8996876-wn7pk gatekeeper] net/http.serverHandler.ServeHTTP(0xc4201d8f70, 0x158f400, 0xc4204a2158, 0xc4205d2800)
[gatekeeper-5bc8996876-wn7pk gatekeeper] /usr/local/go/src/net/http/server.go:2694 +0xbc
[gatekeeper-5bc8996876-wn7pk gatekeeper] net/http.initNPNRequest.ServeHTTP(0xc420104000, 0xc4201d8f70, 0x158f400, 0xc4204a2158, 0xc4205d2800)
[gatekeeper-5bc8996876-wn7pk gatekeeper] /usr/local/go/src/net/http/server.go:3260 +0x9a
[gatekeeper-5bc8996876-wn7pk gatekeeper] net/http.(Handler).ServeHTTP-fm(0x158f400, 0xc4204a2158, 0xc4205d2800)
[gatekeeper-5bc8996876-wn7pk gatekeeper] /usr/local/go/src/net/http/h2_bundle.go:5475 +0x4d
[gatekeeper-5bc8996876-wn7pk gatekeeper] net/http.(*http2serverConn).runHandler(0xc4200d0000, 0xc4204a2158, 0xc4205d2800, 0xc4204c56a0)
[gatekeeper-5bc8996876-wn7pk gatekeeper] /usr/local/go/src/net/http/h2_bundle.go:5760 +0x89
[gatekeeper-5bc8996876-wn7pk gatekeeper] created by net/http.(*http2serverConn).processHeaders
[gatekeeper-5bc8996876-wn7pk gatekeeper] /usr/local/go/src/net/http/h2_bundle.go:5494 +0x46b
[gatekeeper-controller-manager-0 manager] ts=2018-11-27T00:00:37.1089826Z caller=github.com/replicatedhq/gatekeeper/pkg/controller/admissionpolicy/opa_reconciler.go level=info method=ensureOPARunning event="ensure opa instance running"
Automated releases from a tag
Right now, releases are pushed from master. Named tags should create semver-compliant images in DockerHub
controller manager fails to launch new gatekeeper
Followed the Instructions on https://github.com/replicatedhq/gatekeeper#getting-started but the controller manager fails to launch new gatekeeper. controller manager logs show error getting statefulset.
Looking at the code, value hard coded for the controller manager is gatekeeper-controller-manager but the name used for the statefulset in rendered.yaml is controller-manager.
Fixing the statefulset name in rendered.yaml resolves the issue.
It's not possible to deploy > 1 OPA into a namespace
This is only because the names of the secret, service and deployment resources are static with a suffix of -ignore or -fail.
Gatekeeper should report which policy caused a request to be denied
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.