-
Notifications
You must be signed in to change notification settings - Fork 49
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[BUG] Using DownloadSDK stil fails to download files #373
Comments
@OEI-Cgray I'm familiar with quite some error messages at stage "Validate KVA" but I've never seen URLs *.github.com and *.visualstudio.com at AKS Arc setups. What exactly are you trying to do? |
@Elektronenvolt , trying to install it. I couldn't even set the config, let alone run install-akshci. This is the same issue I've seen before, downloads in my environment, with no restrictions on outgoing traffic, fail to download some file. It's not always the same file. If I enable logging and verbose output, I can find the URL that fails to download, and then download it with invoke-webrequest from the same machine, even the same powershell session. But using the scripts, which download with the DownloadSDK module, fails. Because the download size did not match the expected download size, downloadsdk panicked, and killed the process. The file paths are for the DownloadSDK module, which I assume at the moment is a DLL, those would be the local source folders of whatever machine built the release DLL, or something along those lines. They are there because of the panic crash. |
@OEI-Cgray - I never have seen that issue in any of the setups I did. Looks like an issue with the underlying storage. Your download with Invoke-Webrequest to the same storage you've set for AKS Arc? And these days - endpoint protections got better - download from PS may treated as malicious activity. |
The storage is all enterprise class SSDs, and works fine when we were able to install this over a year ago before these same download issues made us abandon it. And yes, downloaded to the same storage. Defender is our endpoint protection, and it does not stop the invoke-webrequest test. That's not to say the activity wasn't flagged when downloading via DownloadSDK, but when checking, Defender currently says it's never detected a threat on the three machines that make up the cluster. The machines have no threat detection history according to the various Azure portals either. I'm happy to generate logs or whatever else needed to troubleshoot this... meanwhile we'll also be setting up all the things to basically do this manually by installing k8s on some vms and then installing the arc integrations afterwards... which is all less ideal than hopefully getting this issue resolved. |
@OEI-Cgray Interesting issue - I'm always curious to know the root cause, a lot of issues I've seen with AKS Arc the last years had been caused by our infrastructure or 'limitations' like Firewalls, permissions, ... In case it comes down to be infra related, would be nice to know the root cause. Well - try to run with debug and verbose flags on, may you see anything interesting in the debug and verbose output. If that doesn't point you to something interesting, looks like it's time for a support case. |
@OEI-Cgray - by searching for something else I've seen that AKS Arc is right now supported on these three regions only: Azure-Regions |
@Elektronenvolt The resource group is in west us, but the download error occurs on the Set-AksHciConfig, as far as I'm aware, you specify the resource group on the next command, Set-AksHciRegistration. I'll have some time finally towards the end of this week for more testing. |
@OEI-Cgray According to docs West US is not supported. Yes, true - would also expect a region-based error at the step where you set the resource group at Set-AksHciRegistration Continue testing - the June release is out and, in your case - try the offline download and offsite setup If that works, consider Internet connectivity issues like #355 |
Hello again, I finally got some time to try the offline download. Attached is the end of the results. It did pass all the 9 tests without any issues.
|
Digging into this more, this function doesn't seem to exist. It's referenced a few lines before the line 7656 error.
This does not seem to exist.
|
Line 7656 is In your log the files I see a user profile path - like: Did you specify directories like in the docs? https://learn.microsoft.com/en-us/azure/aks/hybrid/offline-download-22h2#step-4-configure-the-deployment-onsite |
The folders were all empty when starting. I don't see this function, which is called before Test-OfflineDownloadFiles, in the PSM: Get-ProductReleasesUptoVersion I can get the initial version, but then it fails due to the non-existing (as far as I can tell) function:
|
At |
@Elektronenvolt that's for a static IP setup. The existing powershell process that's failing the download is running using the OS's current DNS servers. These servers do have unrestricted outgoing internet access, and I've checked the firewall to ensure it's not blocking anything due to any of it's internal threat protection mechanisms. |
Ok, I'll try the offline mode on one of my test setups - can combine it with a few other topics. But, try offline and offsite. |
To even get the version from another machine, I have to initialize it? Even though it won't be installed on this machine?
Regardless of that, the function seems to do nothing:
No files were downloaded, no errors. |
The offline download needs to occur from a Server OS with Hyper-V installed?
|
By reading the offline docs to the end, it looks like the offsite feature is supporting upgrades only. I'll test it again on a fresh demo setup with offline mode. Using this feature from time to time and so far never had issues like that. |
@OEI-Cgray These steps for using the offline mode worked fine on a clean single node machine. Means, all AKS Arc folders deleted, all old PS modules removed, and in the user profile .ssh .azure .kube folders deleted.
If you do a |
Describe the bug
DownloadSDK passes its tests during the Set-AksHciConfig, but still fails to actually download the entire file. When it fails, it completely closes the existing powershell window as well, with no mention of a log file... To even see the error message, I had to run powershell within powershell so on the first process would be killed, leaving the error visible to see.
To Reproduce
Steps to reproduce the behavior:
Expected behavior
Files to actually download.
Screenshots
If applicable, add screenshots to help explain your problem.
Environment (please complete the following information):
Collect log files
The text was updated successfully, but these errors were encountered: