Vanilla deployment on OpenShift - 02jh - unable to connect to hub

Hello all,

I was finally able to deploy JupyterHub on OpenShift and all the resources are running, but I am unable to connect to it.

I don’t have anything configured yet and this is just a vanilla install with helm (empty config).

oc get pods
NAME                              READY   STATUS    RESTARTS   AGE
continuous-image-puller-9pq5v     1/1     Running   0          11m
continuous-image-puller-grqdz     1/1     Running   0          11m
continuous-image-puller-vw9bz     1/1     Running   0          11m
hub-5fb55fb685-8lhc2              1/1     Running   2          11m
proxy-767f8d6796-hplgz            1/1     Running   0          11m
user-scheduler-75bdd8c74f-bhx49   1/1     Running   0          11m
user-scheduler-75bdd8c74f-scxfj   1/1     Running   0          11m
oc get services
NAME           TYPE           CLUSTER-IP       EXTERNAL-IP   PORT(S)        AGE
hub            ClusterIP      172.30.109.65    <none>        8081/TCP       12m
proxy-api      ClusterIP      172.30.235.172   <none>        8001/TCP       12m
proxy-public   LoadBalancer   172.30.243.105   <pending>     80:31066/TCP   12m

In OpenShift, I am creating a route to the proxy-public service:

oc get routes
NAME        HOST/PORT                                     PATH   SERVICES       PORT   TERMINATION   WILDCARD
notebooks   notebooks-redacted.example.com          proxy-public   http   edge          None

But when I visit the URL, it just times out!

Looking at the hub container logs, it’s up and it should be accepting traffic:

Loading /usr/local/etc/jupyterhub/secret/values.yaml
No config at /usr/local/etc/jupyterhub/existing-secret/values.yaml
[I 2022-02-03 01:32:33.869 JupyterHub app:2463] Running JupyterHub version 1.4.1
[I 2022-02-03 01:32:33.870 JupyterHub app:2493] Using Authenticator: jupyterhub.auth.DummyAuthenticator-1.4.1
[I 2022-02-03 01:32:33.870 JupyterHub app:2493] Using Spawner: kubespawner.spawner.KubeSpawner-1.0.0
[I 2022-02-03 01:32:33.870 JupyterHub app:2493] Using Proxy: jupyterhub.proxy.ConfigurableHTTPProxy-1.4.1
[W 2022-02-03 01:32:33.902 JupyterHub app:1808] No admin users, admin interface will be unavailable.
[W 2022-02-03 01:32:33.902 JupyterHub app:1809] Add any administrative users to `c.Authenticator.admin_users` in config.
[I 2022-02-03 01:32:33.902 JupyterHub app:1838] Not using allowed_users. Any authenticated user will be allowed.
[I 2022-02-03 01:32:33.995 JupyterHub app:2530] Initialized 0 spawners in 0.005 seconds
[I 2022-02-03 01:32:34.001 JupyterHub app:2742] Not starting proxy
[I 2022-02-03 01:32:34.019 JupyterHub app:2778] Hub API listening on http://:8081/hub/
[I 2022-02-03 01:32:34.020 JupyterHub app:2780] Private Hub API connect url http://hub:8081/hub/
[I 2022-02-03 01:32:34.020 JupyterHub app:2793] Starting managed service cull-idle
[I 2022-02-03 01:32:34.020 JupyterHub service:339] Starting service 'cull-idle': ['python3', '-m', 'jupyterhub_idle_culler', '--url=http://localhost:8081/hub/api', '--timeout=3600', '--cull-every=600', '--concurrency=10']
[I 2022-02-03 01:32:34.026 JupyterHub service:121] Spawning python3 -m jupyterhub_idle_culler --url=http://localhost:8081/hub/api --timeout=3600 --cull-every=600 --concurrency=10
[I 2022-02-03 01:32:34.048 JupyterHub proxy:347] Checking routes
[I 2022-02-03 01:32:34.049 JupyterHub proxy:432] Adding route for Hub: / => http://hub:8081
[I 2022-02-03 01:32:34.056 JupyterHub app:2853] JupyterHub is now running at http://:8000
[I 2022-02-03 01:32:34.316 JupyterHub log:189] 200 GET /hub/api/users (cull-idle@::1) 25.22ms
[I 2022-02-03 01:33:34.064 JupyterHub proxy:347] Checking routes

What am I missing?

Figured it out, one of the network policies I had applied to make this deployment work was restricting traffic from external clients.

The policy was taken from here: Kubernetes - Api_request to the proxy failed with status code 599, retrying - #9 by dprateek1991

Had to change ingress to any peer to get it to work.