VMware/TMC - Revision history

Ders: /* Install TMC */

2025-02-06T17:11:46Z

Install TMC

← Older revision		Revision as of 17:11, 6 February 2025
Line 27:		Line 27:
	#########################		#########################
	mkdir ./tanzumc		mkdir ./tanzumc
	tar -xf $TMC_BUNDLE.tar -C ./tanzumc		tar -xvf $TMC_BUNDLE.tar -C ./tanzumc
	#chmod +x /usr/local/bin/tmc		#chmod +x /usr/local/bin/tmc
	tanzumc/tmc-sm push-images harbor --project $IMGPKG_REGISTRY_HOSTNAME_0/$TMC_PROJECT --username $IMGPKG_REGISTRY_USERNAME_0 --password $IMGPKG_REGISTRY_PASSWORD_0		tanzumc/tmc-sm push-images harbor --project $IMGPKG_REGISTRY_HOSTNAME_0/$TMC_PROJECT --username $IMGPKG_REGISTRY_USERNAME_0 --password $IMGPKG_REGISTRY_PASSWORD_0

Ders: /* References */

2024-07-31T13:41:28Z

References

← Older revision		Revision as of 13:41, 31 July 2024
Line 198:		Line 198:
	= References =		= References =
	https://beyondelastic.com/2023/07/25/tmc-self-managed-e2e-implementation-guide/		https://beyondelastic.com/2023/07/25/tmc-self-managed-e2e-implementation-guide/

			KeyCloak
			https://gist.github.com/gorkemozlu/3b09a27de9c7c1e3d27a4402bfb70aba#file-keycloak-md

	=Troubleshooting=		=Troubleshooting=
	===ERROR: "Could not exchange authorization code"===		===ERROR: "Could not exchange authorization code"===

Ders: /* ERROR: Failed to validate token claims */

2024-07-30T18:59:39Z

ERROR: Failed to validate token claims

← Older revision		Revision as of 18:59, 30 July 2024
Line 228:		Line 228:

	kubectl get cm tls-ca-bundles -n tmc-local -o yaml		kubectl get cm tls-ca-bundles -n tmc-local -o yaml

			Make Sure that the Harbor Cert is in the tmc-values.yaml and make sure the syntax is correct!!!

Ders: /* ERROR: Failed to validate token claims */

2024-07-30T18:58:15Z

ERROR: Failed to validate token claims

← Older revision		Revision as of 18:58, 30 July 2024
Line 220:		Line 220:
	=== ERROR: Failed to validate token claims ===		=== ERROR: Failed to validate token claims ===
	#GET Grpc-Metadata-X-User-Id: from the Request Header		#GET Grpc-Metadata-X-User-Id: from the Request Header
	~~echo "~~eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCJ9.eyJhZGRpdGlvbmFsQ2xhaW1zIjp7ImVtYWlsIjoiZGFuaWVsLnJvZXNzbmVyQGRlcnNsbGMuY29tIiwibmFtZSI6ImFkbWluIiwidGVuYW50X2lkIjoiMSJ9LCJhdF9oYXNoIjoiZmZvVEpyMGdQUzJuNHhLeHgzNkZxUSIsImF1ZCI6WyJjbGllbnQub2F1dGgucGlubmlwZWQuZGV2LWF1dGgtbWFuYWdlci1waW5uaXBlZC1vaWRjLWNsaWVudCJdLCJhdXRoX3RpbWUiOjE3MjIzNTMzNDcsImF6cCI6ImNsaWVudC5vYXV0aC5waW5uaXBlZC5kZXYtYXV0aC1tYW5hZ2VyLXBpbm5pcGVkLW9pZGMtY2xpZW50IiwiZXhwIjoxNzIyMzYzMTM5LCJncm91cHMiOlsiYWRtaW4iLCJjcmVhdGUtcmVhbG0iLCJkZWZhdWx0LXJvbGVzLW1hc3RlciIsIm9mZmxpbmVfYWNjZXNzIiwidG1jOmFkbWluIiwidW1hX2F1dGhvcml6YXRpb24iXSwiaWF0IjoxNzIyMzYzMDE5LCJpc3MiOiJodHRwczovL3Bpbm5pcGVkLXN1cGVydmlzb3IudG1jLmRlcnNsbGMuY29tL3Byb3ZpZGVyL3Bpbm5pcGVkIiwianRpIjoiY2I1Y2Y4ZGEtYWYzZS00ODgwLWFkMTktMzZkZTRkZWEzMmQ4IiwicmF0IjoxNzIyMzUzMzQ3LCJzdWIiOiJodHRwczovL3Nzby5kZXJzbGxjLmNvbS9yZWFsbXMvbWFzdGVyP2lkcE5hbWU9cGlubmlwZWQtdXBzdHJlYW1cdTAwMjZzdWI9MDc2MzkxZGEtNDdlMC00OTZlLTg0OGItM2NlZjQ2MmVjMGQwIiwidXNlcm5hbWUiOiJkYW5pZWwucm9lc3NuZXJAZGVyc2xsYy5jb20ifQ.9ITbF9nujGT812SM0eXmWhrKmGrAGimUMCbx5SCuFiJtt32aYl2yHMuGhIBNE_keJJ0QJ_n2Of91FWP9FWhRnA" \| sed 's/\./\n/g' \| cut -d. -f1 \| base64 --decode \| jq		JWT_HEADER=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCJ9.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.9ITbF9nujGT812SM0eXmWhrKmGrAGimUMCbx5SCuFiJtt32aYl2yHMuGhIBNE_keJJ0QJ_n2Of91FWP9FWhRnA
			echo $JWT_HEADER \| sed 's/\./\n/g' \| cut -d. -f1 \| base64 --decode \| jq

	kubectl logs -n tmc-local --selector app=cluster-agent > cluster-agent-logs.txt		kubectl logs -n tmc-local --selector app=cluster-agent > cluster-agent-logs.txt

Ders: /* ERROR: Failed to validate token claims */

2024-07-30T18:57:32Z

ERROR: Failed to validate token claims

← Older revision		Revision as of 18:57, 30 July 2024
Line 219:		Line 219:

	=== ERROR: Failed to validate token claims ===		=== ERROR: Failed to validate token claims ===
			#GET Grpc-Metadata-X-User-Id: from the Request Header
			echo "eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCJ9.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.9ITbF9nujGT812SM0eXmWhrKmGrAGimUMCbx5SCuFiJtt32aYl2yHMuGhIBNE_keJJ0QJ_n2Of91FWP9FWhRnA" \| sed 's/\./\n/g' \| cut -d. -f1 \| base64 --decode \| jq

	kubectl logs -n tmc-local --selector app=cluster-agent > cluster-agent-logs.txt		kubectl logs -n tmc-local --selector app=cluster-agent > cluster-agent-logs.txt

Ders: /* get Logs */

2024-07-30T18:42:20Z

get Logs

← Older revision		Revision as of 18:42, 30 July 2024
Line 218:		Line 218:


	=== ~~get Logs~~ ===		=== ERROR: Failed to validate token claims ===


	kubectl logs -n tmc-local --selector app=cluster-agent > cluster-agent-logs.txt		kubectl logs -n tmc-local --selector app=cluster-agent > cluster-agent-logs.txt
	cat cluster-agent-logs.txt \| grep error		cat cluster-agent-logs.txt \| grep error

Ders: /* Troubleshooting */

2024-07-30T18:23:51Z

Troubleshooting

← Older revision		Revision as of 18:23, 30 July 2024
Line 216:		Line 216:
	kubectl -n tmc-local get oidcclient/client.oauth.pinniped.dev-auth-manager-pinniped-oidc-client secret/client.oauth.pinniped.dev-auth-manager-pinniped-oidc-client-client-secret-generated		kubectl -n tmc-local get oidcclient/client.oauth.pinniped.dev-auth-manager-pinniped-oidc-client secret/client.oauth.pinniped.dev-auth-manager-pinniped-oidc-client-client-secret-generated
	Once this is done, please try login		Once this is done, please try login


			=== get Logs ===
			kubectl logs -n tmc-local --selector app=cluster-agent > cluster-agent-logs.txt
			cat cluster-agent-logs.txt \| grep error
			cat cluster-agent-logs.txt \| grep x509

			kubectl get cm tls-ca-bundles -n tmc-local -o yaml

Ders: /* ERROR: "Could not exchange authorization code" */

2024-07-29T18:46:42Z

ERROR: "Could not exchange authorization code"

← Older revision		Revision as of 18:46, 29 July 2024
Line 200:		Line 200:
	=Troubleshooting=		=Troubleshooting=
	===ERROR: "Could not exchange authorization code"===		===ERROR: "Could not exchange authorization code"===
			====Option 1====
	* [https://wiki.dersllc.com/index.php/VMware/TMC#Uninstall_TMC Uninstall TMC]		* [https://wiki.dersllc.com/index.php/VMware/TMC#Uninstall_TMC Uninstall TMC]
	* Delete TMC-LOCAL Namespace.		* Delete TMC-LOCAL Namespace.
Line 205:		Line 206:
	* [https://wiki.dersllc.com/index.php/VMware/TMC#Install_TMC Re-Install TMC]		* [https://wiki.dersllc.com/index.php/VMware/TMC#Install_TMC Re-Install TMC]

	Note: Something is still hanging onto an old version of the authorization info. must blow the entire namespace away to make sure all of the config is ~~delted~~.		Note: Something is still hanging onto an old version of the authorization info. must blow the entire namespace away to make sure all of the config is deleted.
			====Option 2====
			Run this command:
			kubectl -n tmc-local delete oidcclient/client.oauth.pinniped.dev-auth-manager-pinniped-oidc-client secret/client.oauth.pinniped.dev-auth-manager-pinniped-oidc-client-client-secret-generated;
			kubectl -n tmc-local delete po -lapp=authenticator;
			kubectl delete lease authenticator-leader-elect;
			and wait for a couple of minutes for the resources to be reconciled..
			Then run this command to get a confirmation:
			kubectl -n tmc-local get oidcclient/client.oauth.pinniped.dev-auth-manager-pinniped-oidc-client secret/client.oauth.pinniped.dev-auth-manager-pinniped-oidc-client-client-secret-generated
			Once this is done, please try login

Ders: /* ERROR: "Could not exchange authorization code" */

2024-07-29T18:09:51Z

ERROR: "Could not exchange authorization code"

← Older revision		Revision as of 18:09, 29 July 2024
Line 203:		Line 203:
	* Delete TMC-LOCAL Namespace.		* Delete TMC-LOCAL Namespace.
	kubectl delete ns tmc-local		kubectl delete ns tmc-local
	* Re-Install TMC.		* [https://wiki.dersllc.com/index.php/VMware/TMC#Install_TMC Re-Install TMC]

	Note: Something is still hanging onto an old version of the authorization info. must blow the entire namespace away to make sure all of the config is delted.		Note: Something is still hanging onto an old version of the authorization info. must blow the entire namespace away to make sure all of the config is delted.

Ders: /* Install TMC on TKGm */

2024-07-29T18:09:30Z

Install TMC on TKGm

← Older revision		Revision as of 18:09, 29 July 2024
Line 9:		Line 9:
	docker run -d --name keycloak -p 8080:8080 -e KEYCLOAK_ADMIN=admin -e KEYCLOAK_ADMIN_PASSWORD='DERS4me!' quay.io/keycloak/keycloak:20.0.2 start --proxy edge --hostname-strict=false		docker run -d --name keycloak -p 8080:8080 -e KEYCLOAK_ADMIN=admin -e KEYCLOAK_ADMIN_PASSWORD='DERS4me!' quay.io/keycloak/keycloak:20.0.2 start --proxy edge --hostname-strict=false

	== Install TMC ~~on TKGm~~ ==		== Install TMC ==
	#################################		#################################
	# Set Install Variables #		# Set Install Variables #