Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Error installing helm-charts - is invalid: spec.ports[0].nodePort: Invalid value: 31080: provided port is already allocated #22

Closed
mikeywaites opened this issue Apr 19, 2021 · 2 comments · Fixed by #24

Comments

@mikeywaites
Copy link

mikeywaites commented Apr 19, 2021

Hey

Been testing out the new onepassword-connect k8s operator. Firstly, what a fantastic ideas - Our team are really keen to get this going.

Our architecture has several isolated namespaces inside a single gke cluster so our plan was to set up 1password connect and operator inside of each namespace.

Trying to install this into a single namespace dev initially results in an error.

helm repo add 1password https://raw.githubusercontent.com/1Password/connect-helm-charts/main

helm upgrade --install connect 1password/connect --namespace=dev --set-file connect.credentials=$SERVICES_BASE_PATH/gke-1password-dev-credentials.json --set operator.create=true --set operator.token.name=gke-1password-dev-access-token --set operator.token.value=REDACTED --set namespace=dev
version.BuildInfo{Version:"v3.5.2", GitCommit:"167aac70832d3a384f65f9745335e9fb40169dc2", GitTreeState:"dirty", GoVersion:"go1.15.7"}
"1password" already exists with the same configuration, skipping
Hang tight while we grab the latest from your chart repositories...
...Successfully got an update from the "soluto" chart repository
...Successfully got an update from the "jetstack" chart repository
...Successfully got an update from the "1password" chart repository
...Successfully got an update from the "stable" chart repository
...Unable to get an update from the "chartmuseum" chart repository (https://chartmuseum-gke.vizibl.co):
        Get "https://chartmuseum-gke.vizibl.co/index.yaml": context deadline exceeded
Update Complete. ⎈Happy Helming!⎈
Release "connect" does not exist. Installing it now.
Error: Service "onepassword-connect" is invalid: spec.ports[0].nodePort: Invalid value: 31080: provided port is already allocated

Error: Service "onepassword-connect" is invalid: spec.ports[0].nodePort: Invalid value: 31080: provided port is already allocated

Hope someone can help us resolve this issue. Also, if there's any advice on how best to manage this architecture where there's an instance of 1password connect per namespace, that would be greatly appreciated.

@jpcoenen
Copy link
Member

Hi there 👋

It seems you have run into the NodePort being a fixed value. I have just merged a fix to address this so Kubernetes uses an available port. We plan on releasing a new version of the Chart later today or at latest tomorrow.

Let me know if that fixes your problem!

@mikeywaites
Copy link
Author

Hey Thanks for getting back to me and for addressing the issue.

I will eagerly await the release so that I can try out the fix. I will let you know either way.

@jpcoenen jpcoenen mentioned this issue Apr 21, 2021
jpcoenen added a commit that referenced this issue Dec 7, 2021
This no longer seems to be necessary with runAsUser and runAsGroup. Files in the `.op` directory get owned by user 999 anyway.

This is one of the ways to get rid of containers running as root, as request in #22.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants