{"action":"created","issue":{"url":"https://api.github.com/repos/apprenda/kismatic/issues/515","repository_url":"https://api.github.com/repos/apprenda/kismatic","labels_url":"https://api.github.com/repos/apprenda/kismatic/issues/515/labels{/name}","comments_url":"https://api.github.com/repos/apprenda/kismatic/issues/515/comments","events_url":"https://api.github.com/repos/apprenda/kismatic/issues/515/events","html_url":"https://github.com/apprenda/kismatic/issues/515","id":224204687,"number":515,"title":"Problems when upgrading Calico CNI Plugin to v1.7.0","user":{"login":"Platzii","id":7767841,"avatar_url":"https://avatars0.githubusercontent.com/u/7767841?v=3","gravatar_id":"","url":"https://api.github.com/users/Platzii","html_url":"https://github.com/Platzii","followers_url":"https://api.github.com/users/Platzii/followers","following_url":"https://api.github.com/users/Platzii/following{/other_user}","gists_url":"https://api.github.com/users/Platzii/gists{/gist_id}","starred_url":"https://api.github.com/users/Platzii/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Platzii/subscriptions","organizations_url":"https://api.github.com/users/Platzii/orgs","repos_url":"https://api.github.com/users/Platzii/repos","events_url":"https://api.github.com/users/Platzii/events{/privacy}","received_events_url":"https://api.github.com/users/Platzii/received_events","type":"User","site_admin":false},"labels":[{"id":419453415,"url":"https://api.github.com/repos/apprenda/kismatic/labels/bug","name":"bug","color":"ee0701","default":true}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":3,"created_at":"2017-04-25T16:54:06Z","updated_at":"2017-04-26T16:16:47Z","closed_at":null,"body":"Hi guys\r\n\r\nWe wanted to test the new [cni-plugin v1.7.0](https://github.com/projectcalico/cni-plugin/releases/tag/v1.7.0) on our cluster but ran into some problems while deploying it using Kismatic.\r\n\r\nOn startup of the container the values for `etcd_key_file`, `etcd_cert_file` and `etcd_ca_cert_file` in the CNI config (`/etc/cni/net.d/10-calico.conf`) change to empty values (`\"\"`).\r\n\r\nWe did some debugging on this and found that this was caused by [this script](https://github.com/projectcalico/cni-plugin/blob/v1.7.0/k8s-install/scripts/install-cni.sh) which overwrites the CNI config file.\r\nThe only reason this worked on v1.6.x was because of a [bug, fixed in 1.7.0](https://github.com/projectcalico/cni-plugin/issues/299) in the script which caused that the config file could not be overwritten.\r\n\r\nImo, there are 2 possible ways to fix this problem:\r\n\r\n1. Quick and 'dirty' way\r\nAs you can see in the script, it uses the env vars `CNI_CONF_ETCD_CA`, `CNI_CONF_ETCD_CERT` and `CNI_CONF_ETCD_KEY`.\r\nIf the vars are set to the paths in the calico-config configmap, the problem is solved.\r\n```\r\n        - name: CNI_CONF_ETCD_CA\r\n          valueFrom:\r\n            configMapKeyRef:\r\n              key: etcd_ca\r\n              name: calico-config\r\n        - name: CNI_CONF_ETCD_CERT\r\n          valueFrom:\r\n            configMapKeyRef:\r\n              key: etcd_cert\r\n              name: calico-config\r\n        - name: CNI_CONF_ETCD_KEY\r\n          valueFrom:\r\n            configMapKeyRef:\r\n              key: etcd_key\r\n              name: calico-config\r\n```\r\n\r\n2. The 'Calico' way\r\nAccording to install-cni.sh, there should be a folder `/calico-secrets` (can be overwritten by setting the TLS_ASSETS_DIR var) containing the 3 pem-files, named: etcd-ca, etcd-cert and etcd-key.\r\nThe vars will then be set by the script, that's what it is supposed to do at least.\r\n\r\nWe did choose for option 1 because it was the most simple solution to get it running on our dev environment although I don't think this is the recommended solution to this problem because it's a bit hacky.\r\n\r\nHope you can do something with this information ;)\r\n\r\nKind regards\r\nSimon"},"comment":{"url":"https://api.github.com/repos/apprenda/kismatic/issues/comments/297463517","html_url":"https://github.com/apprenda/kismatic/issues/515#issuecomment-297463517","issue_url":"https://api.github.com/repos/apprenda/kismatic/issues/515","id":297463517,"user":{"login":"dkoshkin","id":4969231,"avatar_url":"https://avatars2.githubusercontent.com/u/4969231?v=3","gravatar_id":"","url":"https://api.github.com/users/dkoshkin","html_url":"https://github.com/dkoshkin","followers_url":"https://api.github.com/users/dkoshkin/followers","following_url":"https://api.github.com/users/dkoshkin/following{/other_user}","gists_url":"https://api.github.com/users/dkoshkin/gists{/gist_id}","starred_url":"https://api.github.com/users/dkoshkin/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dkoshkin/subscriptions","organizations_url":"https://api.github.com/users/dkoshkin/orgs","repos_url":"https://api.github.com/users/dkoshkin/repos","events_url":"https://api.github.com/users/dkoshkin/events{/privacy}","received_events_url":"https://api.github.com/users/dkoshkin/received_events","type":"User","site_admin":false},"created_at":"2017-04-26T16:16:47Z","updated_at":"2017-04-26T16:16:47Z","body":"@tmjd that should work, I will test and report back. Thanks "}}
{"actor":{"display_login":"dkoshkin"}}