Template version job hasn't completed! #8338

da00891219 · 2023-06-09T10:26:24Z

da00891219
Jun 9, 2023

coder templates create legacy-test-go-template

Upload "."? (yes/no) yes
Γºù Queued

This template has required variables! They are scoped to
the template, and not viewable after being set.

var.use_kubeconfig
Use host kubeconfig? (true/false)

Set this to false if the Coder host is itself running as a Pod on the same
Kubernetes cluster as you are deploying workspaces to.

Set this to true if the Coder host is running outside the Kubernetes cluster
for workspaces. A valid "~/.kube/config" must be present on the Coder host.

Enter a value: true

Γºù Queued
Template version job hasn't completed!

Answered by ericpaulsen

Jul 6, 2023

@da00891219 note that update-ca-certificates will only work if the certificate is already added to the image trust store. the location of this trust store varies depending upon the OS (debian and centOS have different locations). for example:

# Debian and Ubuntu distros
RUN apt-get install -y ca-certificates
COPY my-cert.pem /usr/local/share/ca-certificates/my-cert.crt
RUN update-ca-certificates

# CentOS, Fedora, RedHat distros
RUN yum install ca-certificates && update-ca-trust force-enable
COPY my-cert.pem /etc/pki/ca-trust/source/anchors/
RUN update-ca-trust extract

View full answer

matifali · 2023-06-11T17:39:28Z

matifali
Jun 11, 2023
Collaborator

Can you explain the issue in detail? And share your template?

0 replies

da00891219 · 2023-06-12T08:33:11Z

da00891219
Jun 12, 2023
Author

I am using windows machine, using mobaxterm for linux shell. I need to create templates using coder client.

I had coder client v0.17.1 and server version is v0.23.4 --> then I hit error "unexpected non-JSON response "text/plain; charset=utf-8"." for which I raised issue coder templates create error unexpected non-JSON response #7929
I downloaded v0.23.7 client (and server version at same v0.23.4), then I hit this error as explained in this issue. (Template version job hasn't completed!)

I am doing migration of legacy variables as per https://coder.com/docs/v2/latest/templates/parameters#migration

0 replies

matifali · 2023-06-12T08:36:30Z

matifali
Jun 12, 2023
Collaborator

Hi, @da00891219
You could try two things for both of the issues,

make sure the client and server are both on the same version
make sure line endings are LF for the template files. (for this, you can use vscode)

0 replies

da00891219 · 2023-06-12T08:53:06Z

da00891219
Jun 12, 2023
Author

I have tried with client/server same version v0.23.4, yet same issue
I am using vscode and it has same settings as you recommended.

0 replies

matifali · 2023-06-12T08:55:59Z

matifali
Jun 12, 2023
Collaborator

@da00891219 try running Coder with CODER_VERBOSE=true. It should hopefully tell you what's going on.

0 replies

matifali · 2023-06-12T08:58:26Z

matifali
Jun 12, 2023
Collaborator

Also, #7668 seems like a related issue.

0 replies

mtojek · 2023-06-12T09:19:50Z

mtojek
Jun 12, 2023
Collaborator

I downloaded v0.23.7 client (and server version at same v0.23.4), then I hit this error as explained in this issue. (Template version job hasn't completed!)

We need server logs to confirm what is behind the scenes.

0 replies

mm00922318 · 2023-06-14T07:13:23Z

mm00922318
Jun 14, 2023

Hi, How can we get server logs for coder?

0 replies

mm00922318 · 2023-06-14T07:40:45Z

mm00922318
Jun 14, 2023

From pod logs i see:

2023-06-14 07:02:50.699 [info]  acquired job  initiator_username=mm00922318  provisioner=terraform  job_id=ee485cd5-a871-4dec-9581-c48df4a67c0a
2023-06-14 07:02:50.699 [info]  unpacking template source archive  job_id=ee485cd5-a871-4dec-9581-c48df4a67c0a  size_bytes=9728
2023-06-14 07:02:50.702 [info]  parse complete  job_id=ee485cd5-a871-4dec-9581-c48df4a67c0a  parameter_schemas=[]  template_variables=[]
2023-06-14 07:02:52.753 [info]  coderd: post workspace agent version  request_id=971291c2-42b5-4f9b-b27f-a4c1b025ba5e  agent_id=a0791cbb-9ad5-4068-95cb-eb478b7e9b70  agent_version=v0.23.4+97b4743
2023-06-14 07:02:53.502 [info]  coderd: post workspace agent version  request_id=56a0b20e-d249-442c-b3c6-fd4ef6611a24  agent_id=6c7c3551-4f38-43cc-9832-0bdaa68ce9da  agent_version=v0.23.4+97b4743
2023-06-14 07:02:56.053 [info]  sent FailedJob  job_id=ee485cd5-a871-4dec-9581-c48df4a67c0a

Is this what you mean by server logs?

0 replies

matifali · 2023-06-14T07:48:29Z

matifali
Jun 14, 2023
Collaborator

We need logs from the Coder server, it depends how you deployed Coder and you can restart the server with CODER_VERBOSE=true to get more logs

0 replies

mm00922318 · 2023-06-14T08:45:07Z

mm00922318
Jun 14, 2023

It looks like whether success or failure the job status is not getting passed from server to cli, both are same version.
I was able to finally push the template successfully, but the job status on success also is not passed to cli (Cli returns job hasn't completed error)

Steps i did to push the template:
I copied the terraform to another empty folder.
ran terraform init and terraform plan here, this showed some errors in the template which i fixed.
after this i pushed the new template again with coder templates push after copying back to other folder.
cli says job hasnt completed.
I looked at pod logs. It says success. and true enough. ,I can see the new version in the templates.


023-06-14 08:16:34.769 [info]  acquired job  initiator_username=mm00922318  provisioner=terraform  job_id=bded8a77-89b7-4e0c-a58c-7f11b2fa1351
2023-06-14 08:16:34.770 [info]  unpacking template source archive  job_id=bded8a77-89b7-4e0c-a58c-7f11b2fa1351  size_bytes=9728
2023-06-14 08:16:34.773 [info]  parse complete  job_id=bded8a77-89b7-4e0c-a58c-7f11b2fa1351  parameter_schemas=[]  template_variables=[]
2023-06-14 08:16:37.779 [info]  coderd: post workspace agent version  request_id=5446e757-58cc-4bbb-b9cc-eeb2c027dec3  agent_id=6c7c3551-4f38-43cc-9832-0bdaa68ce9da  agent_version=v0.23.4+97b4743
2023-06-14 08:16:37.796 [info]  coderd: post workspace agent version  request_id=98201cf0-7722-4e4b-a42d-2be26f3a3f8d  agent_id=a0791cbb-9ad5-4068-95cb-eb478b7e9b70  agent_version=v0.23.4+97b4743
2023-06-14 08:16:40.513 [info]  coderd: post workspace agent version  request_id=0ac5624c-957e-44e7-a23f-cc897ba38d2d  agent_id=17da9cd6-76f2-44e0-bf85-5d6b870b32a2  agent_version=v0.23.4+97b4743
2023-06-14 08:16:42.594 [info]  coderd: post workspace agent version  request_id=e6595c29-250a-49c2-a3e4-6d1dd0e8bddb  agent_id=698bc226-f72f-4b09-af20-6aef6e9cb984  agent_version=v0.23.4+97b4743
2023-06-14 08:16:44.356 [info]  parse dry-run provision successful  job_id=bded8a77-89b7-4e0c-a58c-7f11b2fa1351  resource_count=2  resources="[name:\"home-directory\"  type:\"kubernetes_persistent_volume_claim\" name:\"main\"  type:\"kubernetes_pod\"  agents:{name:\"coder\"  startup_script:\"#!/bin/bash\\n\\n# start VNC\\necho \\\"Creating desktop...\\\"\\nmkdir -p \\\"$XFCE_DEST_DIR\\\"\\ncp -rT \\\"$XFCE_BASE_DIR\\\" \\\"$XFCE_DEST_DIR\\\"\\n# Skip default shell config prompt.\\ncp /etc/zsh/newuser.zshrc.recommended $HOME/.zshrc\\necho \\\"Initializing Supervisor...\\\"\\nnohup supervisord\\n\\necho \\\"export PATH=/home/coder/.local/bin:$PATH\\\" >> ~/.bashrc\\nsource ~/.bashrc  \\n\\n# install code-server\\ncurl -fsSL https://code-server.dev/install.sh | sh \\ncode-server --auth none --port 13337 &\\n\\n# use coder CLI to clone and install dotfiles\\ncoder dotfiles -y [email protected]:sharkymark/dotfiles.git\\n\\n# clone repo\\nmkdir -p ~/.ssh\\nssh-keyscan -t ed25519 github.com >> ~/.ssh/known_hosts\\n#git clone --progress [email protected]:sharkymark/java_helloworld.git\\n\\n\"  operating_system:\"linux\"  architecture:\"amd64\"  directory:\"/home/coder\"  apps:{slug:\"code-server\"  display_name:\"VS Code\"  url:\"http://localhost:13337\"  icon:\"/icon/code.svg\"  healthcheck:{url:\"http://localhost:13337/healthz\"  interval:3  threshold:10}}  apps:{slug:\"desktop\"  display_name:\"Desktop\"  url:\"http://localhost:6081\"  icon:\"https://upload.wikimedia.org/wikipedia/commons/c/cf/Eclipse-SVG.svg\"  healthcheck:{url:\"http://localhost:6081/healthz\"  interval:6  threshold:20}}  token:\"\"  connection_timeout_seconds:120  login_before_ready:true  startup_script_timeout_seconds:300  shutdown_script_timeout_seconds:300}  metadata:{key:\"CPU\"  value:\"4 cores\"}  metadata:{key:\"memory\"  value:\"8GB\"}  metadata:{key:\"image\"  value:\"jed.ocir.io/axnfm4jb3i73/dx-coder-images/pycharmv2:latest\"}  metadata:{key:\"disk\"  value:\"100GiB\"}  metadata:{key:\"volume\"  value:\"/home/coder\"}]"  state_length=0
2023-06-14 08:16:47.040 [info]  parse dry-run provision successful  job_id=bded8a77-89b7-4e0c-a58c-7f11b2fa1351  resource_count=1  resources="[name:\"home-directory\"  type:\"kubernetes_persistent_volume_claim\"]"  state_length=0
2023-06-14 08:16:47.050 [info]  coderd.provisionerd-awesome_hofstadter8: inserting template import job resource  job_id=bded8a77-89b7-4e0c-a58c-7f11b2fa1351  resource_name=home-directory  resource_type=kubernetes_persistent_volume_claim  transition=start
2023-06-14 08:16:47.053 [info]  coderd.provisionerd-awesome_hofstadter8: inserting template import job resource  job_id=bded8a77-89b7-4e0c-a58c-7f11b2fa1351  resource_name=main  resource_type=kubernetes_pod  transition=start
2023-06-14 08:16:47.061 [info]  coderd.provisionerd-awesome_hofstadter8: inserting template import job resource  job_id=bded8a77-89b7-4e0c-a58c-7f11b2fa1351  resource_name=home-directory  resource_type=kubernetes_persistent_volume_claim  transition=stop
2023-06-14 08:16:47.063 [info]  coderd.provisionerd-awesome_hofstadter8: inserting template import job parameter  job_id=bded8a77-89b7-4e0c-a58c-7f11b2fa1351  parameter_name=use_kubeconfig
2023-06-14 08:16:47.065 [info]  coderd.provisionerd-awesome_hofstadter8: inserting template import job parameter  job_id=bded8a77-89b7-4e0c-a58c-7f11b2fa1351  parameter_name=dotfiles_uri
2023-06-14 08:16:47.067 [info]  coderd.provisionerd-awesome_hofstadter8: inserting template import job parameter  job_id=bded8a77-89b7-4e0c-a58c-7f11b2fa1351  parameter_name=cpu
2023-06-14 08:16:47.069 [info]  coderd.provisionerd-awesome_hofstadter8: inserting template import job parameter  job_id=bded8a77-89b7-4e0c-a58c-7f11b2fa1351  parameter_name=memory
2023-06-14 08:16:47.071 [info]  coderd.provisionerd-awesome_hofstadter8: inserting template import job parameter  job_id=bded8a77-89b7-4e0c-a58c-7f11b2fa1351  parameter_name=disk_size
2023-06-14 08:16:47.072 [info]  coderd.provisionerd-awesome_hofstadter8: inserting template import job parameter  job_id=bded8a77-89b7-4e0c-a58c-7f11b2fa1351  parameter_name=workspaces_namespace
2023-06-14 08:16:47.079 [info]  sent CompletedJob  job_id=bded8a77-89b7-4e0c-a58c-7f11b2fa1351

For me now another error: Workspace is still not starting. In that error on the workspace pod i again see the JSON error which we have raised here: #7929

2023-06-14 08:38:09.070 [debu]  sdk request  method=POST  url=https://coder.dxt.online/api/v2/workspaceagents/me/startup  body=""
2023-06-14 08:38:09.078 [debu]  sdk response  method=POST  url=https://coder.dxt.online/api/v2/workspaceagents/me/startup  status=200  body=""  trace_id=3e54592daf84bfa36dbdb21e8e6c69f3  span_id=79d19262dc9ee6b5
2023-06-14 08:38:09.078 [debu]  tailnet: updating derp map  derp_map="&{Regions:map[999:0xc0036ad9f0] OmitDefaultRegions:false}"
2023-06-14 08:38:09.078 [debu]  tailnet: updating network map
2023-06-14 08:38:09.078 [debu]  running tailnet connection coordinator
2023-06-14 08:38:09.087 [warn]  run exited with error ...
    error= run coordinator:
               github.com/coder/coder/agent.(*agent).run
                   /home/runner/work/coder/coder/agent/agent.go:596
             - unexpected status code 426: unexpected non-JSON response "text/plain; charset=utf-8"
                Error: WebSocket protocol violation: Connection header "close" does not contain Upgrade
           {"message":"Failed to accept websocket.","detail":"failed to accept WebSocket connection: WebSocket protocol violation: Connection header \"close\" does not contain Upgrade"}
2023-06-14 08:38:10.337 [debu]  tailnet.wgengine: derphttp.Client.Recv: connecting websocket to https://coder.dxt.online/derp
2023-06-14 08:38:10.349 [debu]  tailnet.wgengine: derphttp.Client.Recv: websocket to https://coder.dxt.online/derp error: failed to WebSocket dial: expected handshake response status code 101 but got 426
2023-06-14 08:38:10.349 [debu]  tailnet.wgengine: magicsock: [0xc00014aea0] derp.Recv(derp-999): derphttp.Client.Recv connect to region 999 (coder): failed to WebSocket dial: expected handshake response status code 101 but got 426
2023-06-14 08:38:10.349 [debu]  tailnet.wgengine: derp-999: [v1] backoff: 3406 msec

           github.com/coder/coder/agent.(*agent).run
               /home/runner/work/coder/coder/agent/agent.go:596
         - unexpected status code 426: unexpected non-JSON response "text/plain; charset=utf-8"

0 replies

matifali · 2023-06-14T14:20:04Z

matifali
Jun 14, 2023
Collaborator

I have a few questions.

When do you get this error? While updating the template?
Can you successfully create a new template?
Please share your template so that I can reproduce the error.

0 replies

kylecarbs · 2023-06-14T14:24:35Z

kylecarbs
Jun 14, 2023
Maintainer

@da00891219 are you allowing WebSockets to upgrade properly? It seems like that isn't the case, so the agent can never connect.

0 replies

da00891219 · 2023-06-15T06:03:53Z

da00891219
Jun 15, 2023
Author

disabled SSL
redeployed coder with CODER_ACCESS_URL w/ HTTP url
Created Template from client - ended up in same error - Template version job hasn't completed!

Now we had 2 Issues here- v0.23.4 (http)

Workspace doesn't show IDE Icons - startup log shows git clone related issues
template creation from client throws "Template version job hasn't completed!" error - that said, unable to create new templates

0 replies

da00891219 · 2023-06-27T04:58:31Z

da00891219
Jun 27, 2023
Author

We disabled SSL and upgraded v0.24.1
Modified Templates to use feature_use_managed_variables provider "coder" { feature_use_managed_variables = "true" }
Agent is taking too long to connect error if workspace has no errors on startup
cant see any errors in coder pod logs kubectl logs --tail=100 coder-646454bbc6-fhpk4 -n coder
Unable to delete older workspaces, build fails, and no errors displayed
Please help us to resolve these issues

0 replies

da00891219 · 2023-06-28T05:36:50Z

da00891219
Jun 28, 2023
Author

@kylecarbs or @matifali Can you please help us with above issues. Thank you.

0 replies

da00891219 · 2023-07-03T04:34:00Z

da00891219
Jul 3, 2023
Author

We identified that SSL enablement causing this issue, Any help to fix this issues?

Error: Failed to install provider Error while installing coder/coder v0.6.23: could not query provider registry for registry.terraform.io/coder/coder: failed to retrieve authentication checksums for provider: the request failed after 2 attempts, please try again later: 503 Service Unavailable returned from objects.githubusercontent.com

0 replies

matifali · 2023-07-03T04:46:05Z

matifali
Jul 3, 2023
Collaborator

looks similar to this. hashicorp/terraform#27867 (comment)

Please try using the latest provider version.
i.e. 0.9.0 for Coder.

0 replies

da00891219 · 2023-07-03T05:32:41Z

da00891219
Jul 3, 2023
Author

I have modified my template to user coder provider v0.9.0 and kubernetes provider v2.21.1 (both are latest). And now I can't see ICONS.

Installed hashicorp/kubernetes v2.21.1 (signed by HashiCorp)
Installed coder/coder v0.9.0 (signed by a HashiCorp partner, key ID 93C75807601AA0EC)
agent is taking longer time to connect and icons are not visible in workspace screen

workspace pod log

kubectl logs coder-anildcoder-pycharmv2 -n coder
+ trap waitonexit EXIT
+ mktemp -d -t coder.XXXXXX
+ BINARY_DIR=/tmp/coder.Qbyt26
+ BINARY_NAME=coder
+ BINARY_URL=https://coder-v2-oss.dxt.online/bin/coder-linux-amd64
+ cd /tmp/coder.Qbyt26
+ :
+ status=
+ command -v curl
+ curl -fsSL --compressed https://coder-v2-oss.dxt.online/bin/coder-linux-amd64 -o coder
curl: (60) SSL certificate problem: unable to get local issuer certificate
More details here: https://curl.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.
+ status=60
+ echo error: failed to download coder agent
error: failed to download coder agent
       command returned: 60
Trying again in 30 seconds...
+ echo        command returned: 60
+ echo Trying again in 30 seconds...
+ sleep 30
+ :
+ status=
+ command -v curl
+ curl -fsSL --compressed https://coder-v2-oss.dxt.online/bin/coder-linux-amd64 -o coder
curl: (60) SSL certificate problem: unable to get local issuer certificate
More details here: https://curl.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.
error: failed to download coder agent
       command returned: 60
+ status=60
+ echo error: failed to download coder agent
+ echo        command returned: 60
+ echo Trying again in 30 seconds...
+ sleep 30
Trying again in 30 seconds...
+ :
+ status=
+ command -v curl
+ curl -fsSL --compressed https://coder-v2-oss.dxt.online/bin/coder-linux-amd64 -o coder
curl: (60) SSL certificate problem: unable to get local issuer certificate
More details here: https://curl.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.
+ status=60
+ echo error: failed to download coder agent
+ echo        command returned: 60
error: failed to download coder agent
       command returned: 60
Trying again in 30 seconds...
+ echo Trying again in 30 seconds...
+ sleep 30
+ :
+ status=
+ command -v curl
+ curl -fsSL --compressed https://coder-v2-oss.dxt.online/bin/coder-linux-amd64 -o coder
curl: (60) SSL certificate problem: unable to get local issuer certificate
More details here: https://curl.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.
error: failed to download coder agent
       command returned: 60
Trying again in 30 seconds...
+ status=60
+ echo error: failed to download coder agent
+ echo        command returned: 60
+ echo Trying again in 30 seconds...
+ sleep 30
+ :
+ status=
+ command -v curl
+ curl -fsSL --compressed https://coder-v2-oss.dxt.online/bin/coder-linux-amd64 -o coder
curl: (60) SSL certificate problem: unable to get local issuer certificate
More details here: https://curl.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.
+ status=60
+ echo error: failed to download coder agent
+ echo        command returned: 60
+ error: failed to download coder agent
       command returned: 60
Trying again in 30 seconds...
echo Trying again in 30 seconds...
+ sleep 30
+ :
+ status=
+ command -v curl
+ curl -fsSL --compressed https://coder-v2-oss.dxt.online/bin/coder-linux-amd64 -o coder
curl: (60) SSL certificate problem: unable to get local issuer certificate
More details here: https://curl.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.
+ status=60
+ echo error: failed to download coder agent
+ echo        command returned: 60
error: failed to download coder agent
       command returned: 60
Trying again in 30 seconds...
+ echo Trying again in 30 seconds...
+ sleep 30
+ :
+ status=
+ command -v curl
+ curl -fsSL --compressed https://coder-v2-oss.dxt.online/bin/coder-linux-amd64 -o coder
curl: (60) SSL certificate problem: unable to get local issuer certificate
More details here: https://curl.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.
+ status=60
+ echo error: failed to download coder agent
error: failed to download coder agent
       command returned: 60
Trying again in 30 seconds...
+ echo        command returned: 60
+ echo Trying again in 30 seconds...
+ sleep 30
+ :
+ status=
+ command -v curl
+ curl -fsSL --compressed https://coder-v2-oss.dxt.online/bin/coder-linux-amd64 -o coder
curl: (60) SSL certificate problem: unable to get local issuer certificate
More details here: https://curl.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.
error: failed to download coder agent
       command returned: 60
+ status=60
+ echo error: failed to download coder agent
+ echo        command returned: 60
+ echo Trying again in 30 seconds...
+ sleep 30
Trying again in 30 seconds...
+ :
+ status=
+ command -v curl
+ curl -fsSL --compressed https://coder-v2-oss.dxt.online/bin/coder-linux-amd64 -o coder
curl: (60) SSL certificate problem: unable to get local issuer certificate
More details here: https://curl.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.
+ status=60
+ echo error: failed to download coder agent
+ echo        command returned: 60error: failed to download coder agent
       command returned: 60
Trying again in 30 seconds...

+ echo Trying again in 30 seconds...
+ sleep 30
+ :
+ status=
+ command -v curl
+ curl -fsSL --compressed https://coder-v2-oss.dxt.online/bin/coder-linux-amd64 -o coder
curl: (60) SSL certificate problem: unable to get local issuer certificate
More details here: https://curl.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.
error: failed to download coder agent
       command returned: 60
+ status=60
+ echo error: failed to download coder agent
+ echo        command returned: 60
+ echo Trying again in 30 seconds...
+ sleep 30
Trying again in 30 seconds...
+ :
+ status=
+ command -v curl
+ curl -fsSL --compressed https://coder-v2-oss.dxt.online/bin/coder-linux-amd64 -o coder
curl: (60) SSL certificate problem: unable to get local issuer certificate
More details here: https://curl.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.
+ status=60
+ echo error: failed to download coder agent
+ echo        command returned: 60
error: failed to download coder agent
       command returned: 60
Trying again in 30 seconds...
+ echo Trying again in 30 seconds...
+ sleep 30

0 replies

da00891219 · 2023-07-04T05:24:08Z

da00891219
Jul 4, 2023
Author

I have tried curl -k to ignore certs. it stopped above error but end up in new error to create volumes.

Error: client rate limiter Wait returned an error: context deadline exceeded
on main.tf line 278, in resource "kubernetes_persistent_volume_claim" "home-directory":
  278: resource "kubernetes_persistent_volume_claim" "home-directory" {

0 replies

da00891219 · 2023-07-04T05:37:09Z

da00891219
Jul 4, 2023
Author

though we give curl -k, it is not taking it. It was referenced inside product somewhere I think. I still see this error.

+ command -v curl
+ curl -fsSL --compressed https://coder-v2-oss.dxt.online/bin/coder-linux-amd64 -o coder
curl: (60) SSL certificate problem: unable to get local issuer certificate
More details here: https://curl.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.

0 replies

matifali · 2023-07-04T13:40:33Z

matifali
Jul 4, 2023
Collaborator

@bpmct, can you see what is happening here?

0 replies

da00891219 · 2023-07-06T02:52:59Z

da00891219
Jul 6, 2023
Author

I think "coder_agent.coder.init_script" is having curl command. And curl command not able to find local issuer certificate. How to solve this, help is appreciated.

0 replies

da00891219 · 2023-07-06T12:25:04Z

da00891219
Jul 6, 2023
Author

@sharkymark any help on this appreciated, we are stuck.

0 replies

ericpaulsen · 2023-07-06T12:47:51Z

ericpaulsen
Jul 6, 2023
Collaborator

Hi @da00891219 - to resolve the local issuer certificate error, you will need to add the certificate attached to your Coder access URL into your container image for the workspace pod.

What is the OS of the container image? Ubuntu, RHEL, etc.

0 replies

da00891219 · 2023-07-06T12:51:56Z

da00891219
Jul 6, 2023
Author

The one I am testing is linux/amd64, we have ubuntu also.

I have enabled tls in coder (values.yaml) and upgrade coder ...

  tls:
    secretNames:
      - my-tls-secret

my-tls-secret is created in coder namespace (passed .crt and .key files using kubectl)

0 replies

mafredri · 2023-07-06T12:54:27Z

mafredri
Jul 6, 2023
Collaborator

@da00891219 would it be possible for you to update the image your using to install ca-certificates and run update-ca-certificates? That should take care of the curl issue, assuming the SSL certificate is otherwise valid.

0 replies

da00891219 · 2023-07-06T12:57:13Z

da00891219
Jul 6, 2023
Author

I can try ca-certificates ...
Can you please provide steps if you have any ...

3 replies

matifali Jul 6, 2023
Collaborator

Add this line to your Dockerfile

RUN apt update && apt install -y ca-certificates && update-ca-certificates

ericpaulsen Jul 6, 2023
Collaborator

@da00891219 note that update-ca-certificates will only work if the certificate is already added to the image trust store. the location of this trust store varies depending upon the OS (debian and centOS have different locations). for example:

# Debian and Ubuntu distros
RUN apt-get install -y ca-certificates
COPY my-cert.pem /usr/local/share/ca-certificates/my-cert.crt
RUN update-ca-certificates

# CentOS, Fedora, RedHat distros
RUN yum install ca-certificates && update-ca-trust force-enable
COPY my-cert.pem /etc/pki/ca-trust/source/anchors/
RUN update-ca-trust extract

Answer selected by da00891219

speedythesnail Mar 10, 2024

This is an improved answer that does not require building a custom image, rather just customizing the TF template.
#9863 (comment)

Template version job hasn't completed! #8338

da00891219 Jun 9, 2023

Replies: 28 comments · 3 replies

matifali Jun 11, 2023 Collaborator

da00891219 Jun 12, 2023 Author

matifali Jun 12, 2023 Collaborator

da00891219 Jun 12, 2023 Author

matifali Jun 12, 2023 Collaborator

matifali Jun 12, 2023 Collaborator

mtojek Jun 12, 2023 Collaborator

mm00922318 Jun 14, 2023

mm00922318 Jun 14, 2023

matifali Jun 14, 2023 Collaborator

mm00922318 Jun 14, 2023

matifali Jun 14, 2023 Collaborator

kylecarbs Jun 14, 2023 Maintainer

da00891219 Jun 15, 2023 Author

da00891219 Jun 27, 2023 Author

da00891219 Jun 28, 2023 Author

da00891219 Jul 3, 2023 Author

matifali Jul 3, 2023 Collaborator

da00891219 Jul 3, 2023 Author

da00891219 Jul 4, 2023 Author

da00891219 Jul 4, 2023 Author

matifali Jul 4, 2023 Collaborator

da00891219 Jul 6, 2023 Author

da00891219 Jul 6, 2023 Author

ericpaulsen Jul 6, 2023 Collaborator

da00891219 Jul 6, 2023 Author

mafredri Jul 6, 2023 Collaborator

da00891219 Jul 6, 2023 Author

matifali Jul 6, 2023 Collaborator

ericpaulsen Jul 6, 2023 Collaborator

speedythesnail Mar 10, 2024

da00891219
Jun 9, 2023

Replies: 28 comments 3 replies

matifali
Jun 11, 2023
Collaborator

da00891219
Jun 12, 2023
Author

matifali
Jun 12, 2023
Collaborator

da00891219
Jun 12, 2023
Author

matifali
Jun 12, 2023
Collaborator

matifali
Jun 12, 2023
Collaborator

mtojek
Jun 12, 2023
Collaborator

mm00922318
Jun 14, 2023

mm00922318
Jun 14, 2023

matifali
Jun 14, 2023
Collaborator

mm00922318
Jun 14, 2023

matifali
Jun 14, 2023
Collaborator

kylecarbs
Jun 14, 2023
Maintainer

da00891219
Jun 15, 2023
Author

da00891219
Jun 27, 2023
Author

da00891219
Jun 28, 2023
Author

da00891219
Jul 3, 2023
Author

matifali
Jul 3, 2023
Collaborator

da00891219
Jul 3, 2023
Author

da00891219
Jul 4, 2023
Author

da00891219
Jul 4, 2023
Author

matifali
Jul 4, 2023
Collaborator

da00891219
Jul 6, 2023
Author

da00891219
Jul 6, 2023
Author

ericpaulsen
Jul 6, 2023
Collaborator

da00891219
Jul 6, 2023
Author

mafredri
Jul 6, 2023
Collaborator

da00891219
Jul 6, 2023
Author

matifali Jul 6, 2023
Collaborator

ericpaulsen Jul 6, 2023
Collaborator