Skip to content

Passing an incorrect certificate in the Harbor installation corrupts the install #111

Description

@Turbots

Hello,

We tried installing Harbor Bosh release in Enterprise PKS and provided an incorrect certificate.

The timeout for the pre-start script in the Bosh release was set to the default of 60 minutes.

The prestart script fails at this line: https://github.com/vmware/harbor-boshrelease/blob/master/jobs/harbor/templates/bin/pre-start.erb.sh#L309

You can see that, if the certificate is incorrect, it will continue to return something other than HTTP 200 OK which means this script will stall the process for 60 minutes, without much feedback, even in the logs, there's nothing there except the echo statement. Also, since the problem is in the pre-start script, monit will not boot up properly.

Possible solutions:

  • avoid doing lots of logic in a pre-start script, these are run directly by Bosh
  • give better error logging on why harbor is not coming up (even the HTTP code would help a lot)

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions