vpn-seed-server goes into CrashLoopBackOff on local kind cluster
unmarshall opened this issue · comments
What happened:
Details of the issue are mentioned here
What you expected to happen:
expected vpn-seed-server to start successfully.
Error logs:
2022-04-21 03:30:36 WARNING: --topology net30 support for server configs with IPv4 pools will be removed in a future release. Please migrate to --topology subnet as soon as possible.
2022-04-21 03:30:36 DEPRECATED OPTION: --cipher set to 'AES-256-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM). Future OpenVPN version will ignore --cipher for cipher negotiations. Add 'AES-256-CBC' to --data-ciphers or change --cipher 'AES-256-CBC' to --data-ciphers-fallback 'AES-256-CBC' to silence this warning.
2022-04-21 03:30:36 WARNING: file '/srv/secrets/vpn-server/tls.key' is group or others accessible
2022-04-21 03:30:36 OpenVPN 2.5.2 x86_64-alpine-linux-musl [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on May 4 2021
2022-04-21 03:30:36 library versions: OpenSSL 1.1.1k 25 Mar 2021, LZO 2.10
2022-04-21 03:30:36 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
2022-04-21 03:30:36 TUN/TAP device tun0 opened
2022-04-21 03:30:36 /sbin/ip link set dev tun0 up mtu 1500
2022-04-21 03:30:36 /sbin/ip link set dev tun0 up
2022-04-21 03:30:36 /sbin/ip addr add dev tun0 local 192.168.123.1 peer 192.168.123.2
iptables v1.8.6 (legacy): can't initialize iptables table `filter': iptables who? (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
iptables v1.8.6 (legacy): can't initialize iptables table `filter': iptables who? (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
2022-04-21 03:30:36 /firewall.sh on tun0 1500 1623 192.168.123.1 192.168.123.2 init
2022-04-21 03:30:36 WARNING: Failed running command (--up/--down): external program exited with error status: 3
2022-04-21 03:30:36 Exiting due to fatal error
How to reproduce it (as minimally and precisely as possible):
Try and setup local kind garden cluster using steps mentioned here
Anything else we need to know:
This seems to be a problem when run on the new M1 macos which as ARM64.
Environment:
GOOS = darwin
GOARCH = arm64
MacOs version: Monterey 12.3.1