To GoodData homepage

Knowledge base
AnalyticsDashboards and Reports - KB articles8 Metrics and MAQL - KB articles23
Data modeling & IntegrationData models - KB articles9 Data sources - KB articles9
Development & AdministrationGoodData.UI - KB articles12 Administration - KB articles18 Solution architecture - KB articles8 SDKs and APIs - KB articles9
Community
WelcomeAbout GoodData14
AnalyticsDashboards and Reports161 Metrics and MAQL108
Data modeling & IntegrationData models35 Data sources69
Development & AdministrationGoodData.UI38 Administration86 Solution architecture13 SDKs and APIs28

Ask your question
Login

Community
Search

Replies posted by dlu

14 Replies

Newest first

Oldest first

dluParticipating Frequently

asked in Administration

How to verify GoodData.CN installation on AWS EKS?

Hi Jan,I read https://www.gooddata.com/docs/cloud-native/3.3/deploy-and-install/cloud-native/set-up-authentication/built-in-oidc/ many times, but I missed the section you pasted. Once I mapped the user, everything seems to work well. Thank you very much for helping me figure out the issues along the way. At least I have a working installation as my starting point to add other features. We can close this ticket.Thanks again.

dluParticipating Frequently

asked in Administration

How to verify GoodData.CN installation on AWS EKS?

Hi Jan,Frankly, I don't know what snippet is in Nginx Ingress Controller, but your suggestion worked. I deleted Nginx Ingress Controller and GDCN, added "allowSnippetAnnotations: true" to the values.yaml for Nginx Ingress Controller, and reinstalled the Nginx Ingress Controller and GDCN. When I created the org, everything worked fine and an ingress called "managed-<org_name>" is created. I can then create and list users in DEX as instructed on https://www.gooddata.com/docs/cloud-native/3.3/deploy-and-install/cloud-native/set-up-authentication/built-in-oidc/, using the DNS name of the load balancer when Nginx Ingress Controller is installed.I was also able to load the login page at https://aws-nlb-nginx-ingress-ae2f4016a1575da4.elb.us-east-1.amazonaws.com/dex/auth/local/login?back=&state=wrusuapx3smfr7lvreyh37ln6. When I entered a wrong credential, the page displays "Invalid Email Address and password". When I entered the email and password using the user created above, I got,

dluParticipating Frequently

asked in Administration

How to verify GoodData.CN installation on AWS EKS?

Got it, Jan. Hope you had a wonderful vacation. Looking forward to your response.

dluParticipating Frequently

asked in Administration

How to verify GoodData.CN installation on AWS EKS?

Jan, any thought?

dluParticipating Frequently

asked in Administration

How to verify GoodData.CN installation on AWS EKS?

Hi Jan,I am repositing parts of my original, in case you cannot find the zip file.Today, I deleted the cluster and redid all the steps, but got the same result. What pops up to me are the following lines in the log:[2024-02-28 02:47:54,407] kopf.objects [ERROR ] name=abc-hi-org k8sType=organizations action=createOrg durationMillis=1437 message=admission webhook "validate.nginx.ingress.kubernetes.io" denied the request: nginx.ingress.kubernetes.io/configuration-snippet annotation cannot be used. Snippet directives are disabled by the requests.exceptions.HTTPError: 400 Client Error: Bad Request for url: https: //10.100.0.1:443/apis/networking.k8s.io/v1/namespaces/gooddata-cn/ingressespykube.exceptions.HTTPError: admission webhook "validate.nginx.ingress.kubernetes.io" denied the request: nginx.ingress.kubernetes.io/configuration-snippet annotation cannot be used. Snippet directives are disabled by the Ingress administratorCan you shed light on what it means and what I need to d

dluParticipating Frequently

asked in Administration

How to verify GoodData.CN installation on AWS EKS?

I just posted my findings today, and got the following message shown in the attached image, same as what I got on Friday. Not sure what is going on. Hope you can dig it out and see my postings.

dluParticipating Frequently

asked in Administration

How to verify GoodData.CN installation on AWS EKS?

Hi Jan,Today, I deleted the cluster and redid all the steps, but got the same result. I zipped up the custom values files for installation of gooddata-cn and the organization, as well as the log from one of the organization-controller in the attached zip file.What pops up to me are the following lines in the log:[2024-02-28 02:47:54,407] kopf.objects [ERROR ] name=abc-hi-org k8sType=organizations action=createOrg durationMillis=1437 message=admission webhook "validate.nginx.ingress.kubernetes.io" denied the request: nginx.ingress.kubernetes.io/configuration-snippet annotation cannot be used. Snippet directives are disabled by the requests.exceptions.HTTPError: 400 Client Error: Bad Request for url: https://10.100.0.1:443/apis/networking.k8s.io/v1/namespaces/gooddata-cn/ingressespykube.exceptions.HTTPError: admission webhook "validate.nginx.ingress.kubernetes.io" denied the request: nginx.ingress.kubernetes.io/configuration-snippet annotation cannot be used. Snippet directives

dluParticipating Frequently

asked in Administration

How to verify GoodData.CN installation on AWS EKS?

Hi Jan. Thanks for the response. Sorry I could not respond sooner as my computer got replaced, and I am still in the process getting everything in order.One thing though. I did post another long message last Friday, but once I posted it, the content did NOT show, instead, a message was displayed, to the effect that the administrator of the site will examine the message and decide if it would be posted. Apparently it was gone.Last Friday, I did notice error messages in the logs of “organization-controller”. I will try to get that and the information you asked today.Thanks

dluParticipating Frequently

asked in Administration

How to verify GoodData.CN installation on AWS EKS?

Since you mentioned "the organization controller", I checked the logs of the two controller pods. One of them repeats the following error.[2024-02-23 07:21:04,176] kopf.objects [INFO ] name=xxx-yyy-org k8sType=organizations action=createOrg state=start [2024-02-23 07:21:04,189] kopf.objects [INFO ] name=xxx-yyy-org k8sType=organizations action=orgSpec id=xxx-yyy adminGroup=adminGroup adminUser=admin hostname=gooddata-cn-nginx-aws-ingress-95f3efe87e446ba3.elb.us-east-1.amazonaws.com entitlements=[][2024-02-23 07:21:04,207] kopf.objects [INFO ] name=xxx-yyy-org k8sType=organizations action=metadataOrgUpdate state=start [2024-02-23 07:21:04,309] kopf.objects [INFO ] name=xxx-yyy-org k8sType=organizations action=metadataOrgUpdate durationMillis=100 state=finished [2024-02-23 07:21:04,310] kopf.objects [INFO ] name=xxx-yyy-org k8sType=organizations action=createIngress state=start [2024-02-23 07:21:04,443] kopf.objects [ERROR

dluParticipating Frequently

asked in Administration

How to verify GoodData.CN installation on AWS EKS?

After our discussion on DNS names, I recreated the org, and the HOSTNAME now is the DNSkubectl -n gooddata-cn get orgNAME ID NAME HOSTNAMExxx xxx xxx gooddata-cn-nginx-aws-ingress-95f3efe87e446ba3.elb.us-east-1.amazonaws.comI tried to follow https://www.gooddata.com/docs/cloud-native/3.3/deploy-and-install/cloud-native/set-up-authentication/built-in-oidc/ to get a list of userscurl -H "Authorization: Bearer $BOOTSTRAP_API_TOKEN" \ -H "Content-type: application/json" --request GET\ $HOST_URL/api/v1/auth/usersBut what is $BOOTSTRAP_API_TOKEN? How is it related to the orgnization? Is it the "adminUserToken"? I tried it and it returned 404 Not Found.curl -H "Authorization: Bearer <org adminUserToken>" -H "Content-type: application/json" --request GET http://gooddata-cn-nginx-aws-ingress-95f3efe87e446ba3.elb.us-east-1.amazonaws.com/api/v1/auth/users/<html><head><title>404 Not Found</title></head><body><center><h1&g

dluParticipating Frequently

asked in Administration

How to verify GoodData.CN installation on AWS EKS?

Hi Jan,Thanks for the response. Here is the list of all ingresses in the cluster.kubectl get ingressclass -ANAME CONTROLLER PARAMETERS AGEalb ingress.k8s.aws/alb <none> 3d22hnginx k8s.io/ingress-nginx <none> 3d20hkubectl get ingress -ANAMESPACE NAME CLASS HOSTS ADDRESS PORTS AGEapps first-ingress nginx * 3.227.244.190 80 3d19hgame-2048 ingress-2048 alb * k8s-game2048-ingress2-a72418af39-1957947424.us-east-1.elb.amazonaws.com 80 3d22hgooddata-cn gooddata-cn-dex nginx localhost 3.227.244.190 80 3d13hIn my original post, in step 3, I installed AWS Load Balancer Controller following instructions on https://docs.aws.amazon.com/eks/latest/userguide/aws-load-ba

dluParticipating Frequently

asked in Administration

How to verify GoodData.CN installation on AWS EKS?

Thanks for the answers. I need to digest.But quickly, when I installed nginx-ingress-controller, an AWS Load Balancer was created and can be accessed from internet with its DNS name. Are you saying that I should use this DNS when creating the org?How is this load balancer, created before GDCN installation, get routed to GDCN? I was expecting some ingress definition, but did not see it in the cluster except “gooddata-cn-dex”.Thanks.

dluParticipating Frequently

asked in Administration

How to verify GoodData.CN installation on AWS EKS?

Hi. I went through the https://university.gooddata.com/first-steps-with-gooddatacn course, but those are about the use of GoodData on the website. Is there any course or tuturial about its adminstration on the backend? There are many gooddata-cn pods in the cluster, and what would be the basic steps to check? I can get into a pod with "kubectl exec -it -n gooddata-cn <pod_id> -- /bin/bash" command. Could you give me some CLI commands for some pods?

dluParticipating Frequently

asked in Administration

How to verify GoodData.CN installation on AWS EKS?

Hi Jan,Thanks for the response. Yes, I suspect that license won’t work, and we will work it out. I just want to test the installation first.In terms of installation, everything seems to be working fine. See attached.kubectl -n gooddata-cn get orgNAME ID NAME HOSTNAMEmy-org xxx xxx x.y.example.comI have installed an org, so you are saying $HOST_URL should be http://x.y.example.com? I tried it with curl on my PC, and it could not resolve the host. Is that hostname relative to inside the kubenetes cluster? How do I access it via the AWS load balancers I set up in steps 3 and 4 in the original post? I see an ingress named “gooddata-cn-dex”. How do I access it? What APIs can I use to test the connectivity? Should there be other ingresses for “/api”?Thanks.

Powered by Gainsight

Welcome to the GoodData Community!Cookie settings

Sign up

Already have an account? Login

Social Login

or

Username (also your display name - please use John Doe rather than john.doe) *

E-mail address (if you already use GoodData, we encourage you to use the same e-mail address you use for the GoodData platform) *

Full Name

(Private)

Only you and moderators can see this information

*

Company

(Private)

Only you and moderators can see this information

*

I use the following GoodData products

(Private)

Only you and moderators can see this information

GoodData Platform GoodData Cloud GoodData.CN

Password *

I have read and agree to the GoodData Community and University Terms of Use and Privacy Policy.

loginBox.register.email_repeat

Login to the community

Sign in with your community account. This is different than your login to your GoodData account. Don't have a community login? Create an account

Social Login

or

Username or Email

Password

Remember me

Forgot password?

Enter your username or e-mail address. We'll send you an e-mail with instructions to reset your password.

Username or e-mail

Back to overview

Scanning file for viruses.

Sorry, we're still checking this file's contents to make sure it's safe to download. Please try again in a few minutes.

OK

This file cannot be downloaded

Sorry, our virus scanner detected that this file isn't safe to download.

OK