Neuvector web ui cannot login - internal server error

NeuVector
1

I have k3s installed on a 2 node cluseter and deployed neuvector. From the console of one of the nodes. I go to my web url for neuvector and the login screen admin admin check the eula and it hangs for a few second

Key Issues:

  1. DNS Resolution Failures:

  • There are repeated java.net.UnknownHostException: neuvector-svc-controller.cattle-neuvector-system errors. This indicates that the DNS lookup for the controller service is failing within the pod, which means:

    • The DNS service in your Kubernetes cluster isn’t resolving the service name correctly, or

    • The service neuvector-svc-controller might not be correctly configured or deployed.

  1. Connection Timeouts:

  • Logs show java.util.concurrent.TimeoutException: Future timed out after [60 seconds], indicating that requests to the controller service are timing out. This could be due to:

    • The service not being available due to the DNS issues mentioned above.

    • Network issues or misconfiguration within the cluster.

  1. Authentication and EULA Issues:
  • The manager repeatedly attempts to fetch EULA or authenticate but fails due to the underlying connectivity problems, leading to the observed behavior where the web UI fails to authenticate users or load necessary resources.
2

rebooting doesnt fix the issue. Is there a helm config missing? Where do I check? I have been thrown into a k3s fire with no real experience so any guidance would be appreciated. The above assessment are logs that I ran through grok to check to see what may be the issue. I just dont know what or where to look.

3

Use basic ip address with load balancer. You can also test it with ClusterIP, and use kube proxy to access it. Also check your deployment - if manager and controller are not restarting.

Section for manager in values for helm

manager:
  enabled: true
  resources:
    limits:
      cpu: 250m
      memory: 1000Mi
    requests:
      cpu: 250m
      memory: 250Mi
  svc: # web ui
    type: ClusterIP

next you use this

kubectl port-forward services/neuvector-service-webui 8443:8443 -n neuvector