dapr / dapr/dapr-shared

Dapr Shared instance is not running on 1.14.4 and 1.13.5

Open
#60 0 comments 1 reaction 0 assignees View on GitHub
Dominant language
Go
Stars
52
Forks
14
PR merge metrics
No merged PRs in 30d

Description

When I use the Helm chart and set the image tag to version 1.14.4 or 1.13.5 in the values, while I have installed Dapr system at 1.14.4 or 1.13.5 version, the pod (whether in Deployment or DaemonSet mode) does not run. I see that it gets stuck with the following log:

```
Defaulted container "daprd" out of: daprd, shared-init-container (init)
{"app_id":"atlan","instance":"dapr-shared-chart-dapr-shared-chart-776c555c5d-wkhbv","level":"info","msg":"Starting Dapr Runtime -- version 1.13.5 -- commit e490e58f62110ecdc430d2f39d57428729a487ea","scope":"dapr.runtime","time":"2024-11-28T17:51:06.332294669Z","type":"log","ver":"1.13.5"}
{"app_id":"atlan","instance":"dapr-shared-chart-dapr-shared-chart-776c555c5d-wkhbv","level":"info","msg":"Log level set to: info","scope":"dapr.runtime","time":"2024-11-28T17:51:06.332323002Z","type":"log","ver":"1.13.5"}
{"app_id":"atlan","instance":"dapr-shared-chart-dapr-shared-chart-776c555c5d-wkhbv","level":"fatal","msg":"trust anchors are required","scope":"dapr.runtime","time":"2024-11-28T17:51:06.332992835Z","type":"log","ver":"1.13.5"}
````

```
Defaulted container "daprd" out of: daprd, shared-init-container (init)
{"app_id":"atlan","instance":"dapr-shared-chart-dapr-shared-chart-74979956fd-w6zbw","level":"info","msg":"Starting Dapr Runtime -- version 1.14.4 -- commit 583960dc90120616124b60ad2b7820fc0b3edf44","scope":"dapr.runtime","time":"2024-11-28T17:21:36.935564128Z","type":"log","ver":"1.14.4"}
{"app_id":"atlan","instance":"dapr-shared-chart-dapr-shared-chart-74979956fd-w6zbw","level":"info","msg":"Log level set to: info","scope":"dapr.runtime","time":"2024-11-28T17:21:36.935601378Z","type":"log","ver":"1.14.4"}
{"app_id":"atlan","instance":"dapr-shared-chart-dapr-shared-chart-74979956fd-w6zbw","level":"fatal","msg":"trust anchors are required","scope":"dapr.runtime","time":"2024-11-28T17:21:36.935811044Z","type":"log","ver":"1.14.4"}
```

These are my values:

```
shared:
# -- The Dapr App ID.
appId: "myapp"
# -- The default strategy to run dapr in shared mode. Possible values `daemonset`, `deployment`.
strategy: deployment
# -- The remote port.
remotePort: 0
deployment:
# -- The quantity of replicas. This property is set only when `shared.strategy` is equal to `deployment`
replicas: 1
log:
# -- The daprd log level.
level: info
# -- The daprd log format.
json: true
controlPlane:
# -- Namespace where Dapr Control Plane is.
namespace: "my-dapr"
# -- Trust Domain used by the Dapr Control Plane
trustDomain: "cluster.local"
# -- The Dapr Control Plane operator address.
operatorAddress: "dapr-api.my-dapr.svc.cluster.local:443"
# -- The Dapr Control Plane placement server address.
placementServerAddress: "dapr-placement-server.my-dapr.svc.cluster.local:50005"
# -- The Dapr Control Plane sentry address.
sentryAddress: "dapr-sentry.my-dapr.svc.cluster.local:443"
serviceAccount:
# -- Allows the option to create or not the service account.
create: true
# -- Kubernetes Service Account name.
name: ""
# Kubernetes Service Account annotations.
annotations: {}
service:
# -- The daprd service type.
type: "ClusterIP"
initContainer:
# -- The dapr API token.
token: ""
image:
# -- The dapr-shared image registry.
registry: "docker.io/daprio"
# -- The dapr-shared image name.
name: dapr-shared
# -- The dapr-shared-init image tag.
tag: 0.0.15
# -- The init container pull policy.
pullPolicy: Always
scheduling:
# -- node selector for shared Dapr
nodeSelector: {}
daprd:
app:
# -- Dapr which protocol your application is using. Valid options are `http`` and `grpc``.
protocol: "http"
# -- Dapr API token to use for token based API authentication.
token: ""
# -- The HTTP port for the Dapr API.
httpPort: 3500
# -- gRPC port for the Dapr Internal API to listen on.
grpcPort: 50001
# -- gRPC port for the Dapr Internal API to listen on.
internalGrpcPort: 50002
# -- The HTTP public port for the Dapr API.
publicPort: 3501
# -- Comma separated list of IP addresses that daprd will listen to. Defaults to all in standalone mode. Defaults to [::1],127.0.0.1 in Kubernetes. To listen to all IPv4 addresses, use 0.0.0.0. To listen to all IPv6 addresses, use [::].
listenAddresses: "0.0.0.0"
# -- name of configuration
config: ""
image:
# -- Daprd image registry.
registry: "docker.io/daprio"
# -- Daprd image.
name: daprd
# -- Daprd image version.
tag: 1.14.4
# -- Daprd image pull policy.
pullPolicy: Always
metrics:
# -- Enable prometheus metric.
enabled: true
# -- Sets the port for the sidecar metrics server.
port: 9090
mtls:
# -- Enables automatic mTLS for daprd to daprd communication channels.
enabled: true
apiLogging:
# -- Enables API logging for the daprd.
enabled: true
appHealth:
# -- Enables the app health checks
enabled: true
# -- Path that Dapr invokes for health probes when the app channel is HTTP (this value is ignored if the app channel is using gRPC)
path: "/healthz"
# -- Number of seconds between each health probe
probeInterval: 5
# -- Timeout in milliseconds for health probe requests
probeTimeout: 500
# -- Max number of consecutive failures before the app is considered unhealthy
threshold: 3
# @ignored
tolerations:
# these tolerations are to have the daemonset runnable on control plane nodes
# remove them if your control plane nodes should not run pods
# @ignored
- key: node-role.kubernetes.io/control-plane
# @ignored
operator: Exists
# @ignored
effect: NoSchedule
# @ignored
- key: node-role.kubernetes.io/master
# @ignored
operator: Exists
# @ignored
effect: NoSchedule
# @ignored
affinity: {}
```

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by reproducing the issue with the supplied Helm values and image tags 1.13.5 and 1.14.4. Inspect the rendered Deployment and DaemonSet manifests alongside the daprd startup logs; done means both strategies start successfully without the “trust anchors are required” failure.

Written by the indexing model from the issue text.

Assessment

Tech stack
go, helm, kubernetes
Domain
devops, infrastructure
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
30/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.