Files

T

Sergey Antropoff 48df10b17e Prepare 0.1.0 for lab release: durable handlers, HTTP Compose, CI, and pulumi-tests.

- Harden DB-backed handlers and seed profiles; align client wire shapes for
  cluster resources, QEMU config, and node SSL fields
- Serve plain HTTP on Compose :8006; keep TLS optional (--profile tls) and
  terminate HTTPS at Kubernetes Ingress
- Add pulumi-tests (full contract surface majors 6–9 + BPG lifecycle) and
  make pulumi-tests
- Ship bilingual docs, CHANGELOG, SECURITY, CONTRIBUTING, and GitHub Actions
  (make ci + Compose/Helm validation)

2026-07-18 04:18:05 +03:00

2.4 KiB

Raw Blame History

Language / Язык: English | Русский

Troubleshooting

Ready stays unavailable

Confirm Postgres: make logs / Compose health.
Run make db-migrate.
Hit /health/ready again.

Workers may retry until migrations catch up after a late migrate.

Unexpected HTTP 501

Declared methods on majors 6–9 should have handlers. If you see 501:

Confirm the active runtime (/api2/json/version and Web UI runtime label).
Confirm you are calling the path/verb exactly as declared for that major.
Check CONTRACT_FALLBACK is not masking a different issue with fixture mode.
Report a regression — full registry coverage is expected.

401 / 403

Ticket expired or cookie not sent.
Mutation missing CSRFPreventionToken on a ticket session.
API token malformed (PVEAPIToken=user@realm!id=secret).
ACL denial (try auditor@pve vs root@pam to compare).

Task never finishes

Inspect /nodes/{node}/tasks/{upid}/status and /log.
Check worker logs (make logs).
Verify TASK_WORKER_CONCURRENCY > 0 and database leases can be claimed.
Extremely high SIMULATION_TIME_SCALE slowdowns are unusual (higher = faster simulation); mis-set worker leases are more common culprits.

proxmoxer / TLS failures

Compose default is plain HTTP :8006. proxmoxer is HTTPS-only — enable docker compose --profile tls and use https://localhost:8443/ with verify_ssl=False for the lab self-signed cert.
Inside Compose, target tls-gateway:8443 when the tls profile is on.
Host :8007 is not used by this stack (on hardware it is usually PBS).
On Kubernetes, use your Ingress HTTPS hostname (cert-manager).
Seeded node name for small is pve01, not pve1.
Profiles medium / ha-demo use pve1 / pve2 / pve3.
Port map: Ports and TLS.

Terraform / Pulumi drift after reseed

Reseed replaces PostgreSQL guests; tool state files do not. Refresh, import, or rebuild stacks after make seed.

Hot-swap “did nothing”

Catalog browse ≠ apply. Use Apply as runtime or POST /ui/api/contract/apply?major=N.
Confirm with /api2/json/version.
Remember apply is process-local; Compose restart restores CONTRACT_SNAPSHOT.

Demo unload surprised you

POST /ui/api/demo/unload clears API-created state and loads minimal. Re-run make seed PROFILE=small (or load demo again) to restore richer fixtures.

2.4 KiB Raw Blame History Unescape Escape