What were you trying to do?
swap out deployment, like this:
telepresence --swap-deployment goalkeeper --run-shell
What did you expect to happen?
deployment is successfully replaced in the k8s cluster.
What happened instead?
it seems like the proxy deployment failed to come up because the docker image's ssh key files (such as /etc/ssh/ssh_host_rsa_key) have linux permissions that are too permissive. chmod 0600 is desirable, but 0640 is found, and although it says "warning" a number of times, it ends up being fatal, it seems, because it can't find any keys. the docker image it was using was:
datawire/telepresence-k8s:0.99
Automatically included information
Command line: ['/usr/local/bin/telepresence', '--swap-deployment', 'goalkeeper-qa8', '--run-shell']
Version: 0.99
Python version: 3.7.3 (default, Mar 29 2019, 07:52:52) [Clang 10.0.1 (clang-1001.0.46.3)]
kubectl version: Client Version: v1.11.0 // Server Version: v1.13.5
oc version: (error: [Errno 2] No such file or directory: 'oc': 'oc')
OS: Darwin rslmac14810.example.com 18.5.0 Darwin Kernel Version 18.5.0: Mon Mar 11 20:40:32 PDT 2019; root:xnu-4903.251.3~3/RELEASE_X86_64 x86_64
Traceback (most recent call last):
File "/usr/local/bin/telepresence/telepresence/cli.py", line 136, in crash_reporting
yield
File "/usr/local/bin/telepresence/telepresence/main.py", line 60, in main
remote_info = start_proxy(runner)
File "/usr/local/bin/telepresence/telepresence/proxy/__init__.py", line 95, in start_proxy
run_id=run_id,
File "/usr/local/bin/telepresence/telepresence/proxy/remote.py", line 202, in get_remote_info
wait_for_pod(runner, remote_info)
File "/usr/local/bin/telepresence/telepresence/proxy/remote.py", line 134, in wait_for_pod
"Pod isn't starting or can't be found: {}".format(pod["status"])
RuntimeError: Pod isn't starting or can't be found: {'conditions': [{'lastProbeTime': None, 'lastTransitionTime': '2019-04-26T20:08:06Z', 'status': 'True', 'type': 'Initialized'}, {'lastProbeTime': None, 'lastTransitionTime': '2019-04-26T20:08:06Z', 'message': 'containers with unready status: [goalkeeper-qa8]', 'reason': 'ContainersNotReady', 'status': 'False', 'type': 'Ready'}, {'lastProbeTime': None, 'lastTransitionTime': '2019-04-26T20:08:06Z', 'message': 'containers with unready status: [goalkeeper-qa8]', 'reason': 'ContainersNotReady', 'status': 'False', 'type': 'ContainersReady'}, {'lastProbeTime': None, 'lastTransitionTime': '2019-04-26T20:08:06Z', 'status': 'True', 'type': 'PodScheduled'}], 'containerStatuses': [{'containerID': 'docker://aa93b526f3065f567f1d18b813df07b0db56c8711d4bd4ecc43b037604d73c65', 'image': 'datawire/telepresence-k8s:0.99', 'imageID': 'docker-pullable://datawire/[email protected]:f9b640fa6640a0437cbafb0a3a238b10daf86e117e5a3ca4d4cd4b07eee76f9c', 'lastState': {'terminated': {'containerID': 'docker://aa93b526f3065f567f1d18b813df07b0db56c8711d4bd4ecc43b037604d73c65', 'exitCode': 1, 'finishedAt': '2019-04-26T20:09:51Z', 'message': "@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@ WARNING: UNPROTECTED PRIVATE KEY FILE! @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
Permissions 0640 for '/etc/ssh/ssh_host_rsa_key' are too open.
It is required that your private key files are NOT accessible by others.
This private key will be ignored.
key_load_private: bad permissions
Could not load host key: /etc/ssh/ssh_host_rsa_key
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@ WARNING: UNPROTECTED PRIVATE KEY FILE! @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
Permissions 0640 for '/etc/ssh/ssh_host_dsa_key' are too open.
It is required that your private key files are NOT accessible by others.
This private key will be ignored.
key_load_private: bad permissions
Could not load host key: /etc/ssh/ssh_host_dsa_key
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@ WARNING: UNPROTECTED PRIVATE KEY FILE! @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
Permissions 0640 for '/etc/ssh/ssh_host_ecdsa_key' are too open.
It is required that your private key files are NOT accessible by others.
This private key will be ignored.
key_load_private: bad permissions
Could not load host key: /etc/ssh/ssh_host_ecdsa_key
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@ WARNING: UNPROTECTED PRIVATE KEY FILE! @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
Permissions 0640 for '/etc/ssh/ssh_host_ed25519_key' are too open.
It is required that your private key files are NOT accessible by others.
This private key will be ignored.
key_load_private: bad permissions
Could not load host key: /etc/ssh/ssh_host_ed25519_key
sshd: no hostkeys available -- exiting.