<p>If users have a strict firewall setup on their Kubernetes nodes, the provisioning of a PV from a storageclass backed by a cStor storage pool may fail. The pool can be created without any issue and even the storage class is created, but the PVs may stay in pending state indefinitely. you may need to check the openebs-provisioner log.</p>
<p>Workaround:</p>
<p>This issue has currently only been observed, if the underlying node uses a network bridge and if the setting net.bridge.bridge-nf-call-iptables=1 in the /etc/sysctl.conf is present. The aforementioned setting is required in some Kubernetes installations, such as the Rancher Kubernetes Engine (RKE).</p>
<p>To avoid this issue, open the port 5656/tcp on the nodes that run the OpenEBS API pod. Alternatively, removing the network bridge might work.</p>
<p>NB: this solution is from the docs and the link is:<a href="https://openebs.io/docs/main/troubleshooting/volume-provisioning#persistent-volumes-indefinitely-remain-in-pending-state" rel="nofollow noreferrer">https://openebs.io/docs/main/troubleshooting/volume-provisioning#persistent-volumes-indefinitely-remain-in-pending-state</a></p>

CC BY-SA 4.0
2023-04-25T06:11:38.573Z
2023-04-25T06:11:38.573Z
Nonso
<p>I'm trying to setup distributed raid 1+0 storage on my k3s cluster running of 5 raspberry pi 4s running armbian (jammy).  Currently I'm seeing the event <code>waiting for a volume to be created, either by external provisioner &quot;openebs.io/provisioner-raw-block&quot; or manually created by system administrator</code> on my test PVC and it has been stuck provisioning in a pending state for over 24 hours now.  It seems like the worker was asked to provision... but it isn't?  I'm not sure why not.</p>
<p>My master node is <code>atlas00</code> and the workers are <code>02, 04, 05, 06</code>, &amp; <code>08</code>.  I have a hdd attached to each worker mounted at <code>/mnt/eos&lt;worker #/2 -1&gt;</code> (so <code>atlas02</code> has a mounted drive at <code>/mnt/eos0</code> and <code>atlas04</code> has a mounted drive at <code>/mnt/eos1</code> and so on).  Below is my PVC and SC description and list of pods for OpenEBS and my nodes.  I'm not sure what all would be helpful here to troubleshoot this even.  If you have any insight into what might be going on, I'd appreciate your wisdom - thanks!</p>
<pre><code>root@atlas00:~# kubectl describe pvc eos-pvc-test
Name:          eos-pvc-test
Namespace:     default
StorageClass:  eos-raid10
Status:        Pending
Volume:        
Labels:        &lt;none&gt;
Annotations:   volume.beta.kubernetes.io/storage-provisioner: openebs.io/provisioner-raw-block
               volume.kubernetes.io/storage-provisioner: openebs.io/provisioner-raw-block
Finalizers:    [kubernetes.io/pvc-protection]
Capacity:      
Access Modes:  
VolumeMode:    Filesystem
Used By:       &lt;none&gt;
Events:
  Type    Reason                Age                     From                         Message
  ----    ------                ----                    ----                         -------
  Normal  ExternalProvisioning  3m16s (x5983 over 24h)  persistentvolume-controller  waiting for a volume to be created, either by external provisioner &quot;openebs.io/provisioner-raw-block&quot; or manually created by system administrator
root@atlas00:~# kubectl describe sc eos-raid10
Name:            eos-raid10
IsDefaultClass:  No
Annotations:     kubectl.kubernetes.io/last-applied-configuration={&quot;apiVersion&quot;:&quot;storage.k8s.io/v1&quot;,&quot;kind&quot;:&quot;StorageClass&quot;,&quot;metadata&quot;:{&quot;annotations&quot;:{},&quot;name&quot;:&quot;eos-raid10&quot;},&quot;parameters&quot;:{&quot;cas.openebs.io/config&quot;:&quot;- name: StorageType\n  value: \&quot;raid-10\&quot;\n- name: ReplicaAutoCreation\n  value: \&quot;true\&quot;\n&quot;,&quot;openebs.io/block-device&quot;:&quot;[\n  {\&quot;nodeID\&quot;: \&quot;atlas01\&quot;, \&quot;devicePath\&quot;: \&quot;/dev/sda\&quot;},\n  {\&quot;nodeID\&quot;: \&quot;atlas02\&quot;, \&quot;devicePath\&quot;: \&quot;/dev/sda\&quot;},\n  {\&quot;nodeID\&quot;: \&quot;atlas03\&quot;, \&quot;devicePath\&quot;: \&quot;/dev/sda\&quot;},\n  {\&quot;nodeID\&quot;: \&quot;atlas04\&quot;, \&quot;devicePath\&quot;: \&quot;/dev/sda\&quot;}\n]\n&quot;,&quot;openebs.io/capacity&quot;:&quot;10G&quot;,&quot;openebs.io/cstor-target-ips&quot;:&quot;192.168.42.52,192.168.42.54,192.168.42.56,192.168.42.58&quot;,&quot;openebs.io/cstor-target-path&quot;:&quot;/mnt/eos0,/mnt/eos1,/mnt/eos2,/mnt/eos3&quot;,&quot;openebs.io/jiva-replica-count&quot;:&quot;4&quot;,&quot;openebs.io/jiva-replica-image&quot;:&quot;quay.io/openebs/jiva:0.8.0&quot;,&quot;openebs.io/readwrite&quot;:&quot;rw&quot;,&quot;openebs.io/storage-engine&quot;:&quot;jiva&quot;,&quot;openebs.io/storage-pool&quot;:&quot;default&quot;,&quot;openebs.io/volume-monitor&quot;:&quot;true&quot;,&quot;targetPortal&quot;:&quot;192.168.42.52:3260,192.168.42.54:3260,192.168.42.56:3260,192.168.42.58:3260&quot;},&quot;provisioner&quot;:&quot;openebs.io/provisioner-raw-block&quot;}

Provisioner:  openebs.io/provisioner-raw-block
Parameters:   cas.openebs.io/config=- name: StorageType
  value: &quot;raid-10&quot;
- name: ReplicaAutoCreation
  value: &quot;true&quot;
,openebs.io/block-device=[
  {&quot;nodeID&quot;: &quot;atlas01&quot;, &quot;devicePath&quot;: &quot;/dev/sda&quot;},
  {&quot;nodeID&quot;: &quot;atlas02&quot;, &quot;devicePath&quot;: &quot;/dev/sda&quot;},
  {&quot;nodeID&quot;: &quot;atlas03&quot;, &quot;devicePath&quot;: &quot;/dev/sda&quot;},
  {&quot;nodeID&quot;: &quot;atlas04&quot;, &quot;devicePath&quot;: &quot;/dev/sda&quot;}
]
,openebs.io/capacity=10G,openebs.io/cstor-target-ips=192.168.42.52,192.168.42.54,192.168.42.56,192.168.42.58,openebs.io/cstor-target-path=/mnt/eos0,/mnt/eos1,/mnt/eos2,/mnt/eos3,openebs.io/jiva-replica-count=4,openebs.io/jiva-replica-image=quay.io/openebs/jiva:0.8.0,openebs.io/readwrite=rw,openebs.io/storage-engine=jiva,openebs.io/storage-pool=default,openebs.io/volume-monitor=true,targetPortal=192.168.42.52:3260,192.168.42.54:3260,192.168.42.56:3260,192.168.42.58:3260
AllowVolumeExpansion:  &lt;unset&gt;
MountOptions:          &lt;none&gt;
ReclaimPolicy:         Delete
VolumeBindingMode:     Immediate
Events:                &lt;none&gt;
root@atlas00:~# kubectl get pods -n openebs
NAME                                              READY   STATUS    RESTARTS       AGE
openebs-ndm-z9vqb                                 1/1     Running   0              25h
openebs-cstor-cspc-operator-86b95cb7b-9gnst       1/1     Running   0              25h
openebs-ndm-ss88z                                 1/1     Running   0              25h
openebs-ndm-6vhwk                                 1/1     Running   0              25h
openebs-ndm-operator-698457995-ppp78              1/1     Running   0              25h
openebs-cstor-cvc-operator-bf7b8d559-lhl8c        1/1     Running   0              25h
openebs-ndm-5kjtk                                 1/1     Running   0              25h
openebs-cstor-csi-node-dwsgj                      2/2     Running   0              25h
openebs-cstor-csi-node-r8tc4                      2/2     Running   0              25h
openebs-ndm-x7cbh                                 1/1     Running   0              25h
openebs-cstor-csi-node-j59q9                      2/2     Running   0              25h
openebs-cstor-csi-node-xv9th                      2/2     Running   0              25h
openebs-cstor-admission-server-7d89bb76bf-bmd2m   1/1     Running   0              25h
openebs-cstor-csi-node-xt9jv                      2/2     Running   0              25h
openebs-localpv-provisioner-7576d8cbcf-6nbl8      1/1     Running   14 (18m ago)   25h
openebs-cstor-csi-controller-0                    6/6     Running   12 (18m ago)   25h
root@atlas00:~# kubectl get nodes
NAME      STATUS   ROLES                  AGE   VERSION
atlas08   Ready    worker                 26h   v1.26.3+k3s1
atlas06   Ready    worker                 26h   v1.26.3+k3s1
atlas04   Ready    worker                 26h   v1.26.3+k3s1
atlas00   Ready    control-plane,master   26h   v1.26.3+k3s1
atlas02   Ready    worker                 26h   v1.26.3+k3s1
root@atlas00:~# lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description:    Ubuntu 22.04.2 LTS
Release:        22.04
Codename:       jammy
</code></pre>

<kubernetes><storage><k3s><distributed-systems>
Distrubuted storage PVC on k3s using OpenEBS is stuck in a pending status while provisioning - waiting on external provisioning, not sure why
Snorghma
# Distrubuted storage PVC on k3s using OpenEBS is stuck in a pending status while provisioning - waiting on external provisioning, not sure why

(Asked by: username_0 on 2023-04-24)

I'm trying to setup distributed raid 1+0 storage on my k3s cluster running of 5 raspberry pi 4s running armbian (jammy).  Currently I'm seeing the event waiting for a volume to be created, either by external provisioner "openebs.io/provisioner-raw-block" or manually created by system administrator on my test PVC and it has been stuck provisioning in a pending state for over 24 hours now.  It seems like the worker was asked to provision... but it isn't?  I'm not sure why not.
My master node is atlas00 and the workers are 02, 04, 05, 06, & 08.  I have a hdd attached to each worker mounted at /mnt/eos (so atlas02 has a mounted drive at /mnt/eos0 and atlas04 has a mounted drive at /mnt/eos1 and so on).  Below is my PVC and SC description and list of pods for OpenEBS and my nodes.  I'm not sure what all would be helpful here to troubleshoot this even.  If you have any insight into what might be going on, I'd appreciate your wisdom - thanks!
root@atlas00:~# kubectl describe pvc eos-pvc-test
Name:          eos-pvc-test
Namespace:     default
StorageClass:  eos-raid10
Status:        Pending
Volume:        
Labels:        
Annotations:   volume.beta.kubernetes.io/storage-provisioner: openebs.io/provisioner-raw-block
               volume.kubernetes.io/storage-provisioner: openebs.io/provisioner-raw-block
Finalizers:    [kubernetes.io/pvc-protection]
Capacity:      
Access Modes:  
VolumeMode:    Filesystem
Used By:       
Events:
  Type    Reason                Age                     From                         Message
  ----    ------                ----                    ----                         -------
  Normal  ExternalProvisioning  3m16s (x5983 over 24h)  persistentvolume-controller  waiting for a volume to be created, either by external provisioner "openebs.io/provisioner-raw-block" or manually created by system administrator
root@atlas00:~# kubectl describe sc eos-raid10
Name:            eos-raid10
IsDefaultClass:  No
Annotations:     kubectl.kubernetes.io/last-applied-configuration={"apiVersion":"storage.k8s.io/v1","kind":"StorageClass","metadata":{"annotations":{},"name":"eos-raid10"},"parameters":{"cas.openebs.io/config":"- name: StorageType\n  value: \"raid-10\"\n- name: ReplicaAutoCreation\n  value: \"true\"\n","openebs.io/block-device":"[\n  {\"nodeID\": \"atlas01\", \"devicePath\": \"/dev/sda\"},\n  {\"nodeID\": \"atlas02\", \"devicePath\": \"/dev/sda\"},\n  {\"nodeID\": \"atlas03\", \"devicePath\": \"/dev/sda\"},\n  {\"nodeID\": \"atlas04\", \"devicePath\": \"/dev/sda\"}\n]\n","openebs.io/capacity":"10G","openebs.io/cstor-target-ips":"192.168.42.52,192.168.42.54,192.168.42.56,192.168.42.58","openebs.io/cstor-target-path":"/mnt/eos0,/mnt/eos1,/mnt/eos2,/mnt/eos3","openebs.io/jiva-replica-count":"4","openebs.io/jiva-replica-image":"quay.io/openebs/jiva:0.8.0","openebs.io/readwrite":"rw","openebs.io/storage-engine":"jiva","openebs.io/storage-pool":"default","openebs.io/volume-monitor":"true","targetPortal":"192.168.42.52:3260,192.168.42.54:3260,192.168.42.56:3260,192.168.42.58:3260"},"provisioner":"openebs.io/provisioner-raw-block"}

Provisioner:  openebs.io/provisioner-raw-block
Parameters:   cas.openebs.io/config=- name: StorageType
  value: "raid-10"
- name: ReplicaAutoCreation
  value: "true"
,openebs.io/block-device=[
  {"nodeID": "atlas01", "devicePath": "/dev/sda"},
  {"nodeID": "atlas02", "devicePath": "/dev/sda"},
  {"nodeID": "atlas03", "devicePath": "/dev/sda"},
  {"nodeID": "atlas04", "devicePath": "/dev/sda"}
]
,openebs.io/capacity=10G,openebs.io/cstor-target-ips=192.168.42.52,192.168.42.54,192.168.42.56,192.168.42.58,openebs.io/cstor-target-path=/mnt/eos0,/mnt/eos1,/mnt/eos2,/mnt/eos3,openebs.io/jiva-replica-count=4,openebs.io/jiva-replica-image=quay.io/openebs/jiva:0.8.0,openebs.io/readwrite=rw,openebs.io/storage-engine=jiva,openebs.io/storage-pool=default,openebs.io/volume-monitor=true,targetPortal=192.168.42.52:3260,192.168.42.54:3260,192.168.42.56:3260,192.168.42.58:3260
AllowVolumeExpansion:  
MountOptions:          
ReclaimPolicy:         Delete
VolumeBindingMode:     Immediate
Events:                
root@atlas00:~# kubectl get pods -n openebs
NAME                                              READY   STATUS    RESTARTS       AGE
openebs-ndm-z9vqb                                 1/1     Running   0              25h
openebs-cstor-cspc-operator-86b95cb7b-9gnst       1/1     Running   0              25h
openebs-ndm-ss88z                                 1/1     Running   0              25h
openebs-ndm-6vhwk                                 1/1     Running   0              25h
openebs-ndm-operator-698457995-ppp78              1/1     Running   0              25h
openebs-cstor-cvc-operator-bf7b8d559-lhl8c        1/1     Running   0              25h
openebs-ndm-5kjtk                                 1/1     Running   0              25h
openebs-cstor-csi-node-dwsgj                      2/2     Running   0              25h
openebs-cstor-csi-node-r8tc4                      2/2     Running   0              25h
openebs-ndm-x7cbh                                 1/1     Running   0              25h
openebs-cstor-csi-node-j59q9                      2/2     Running   0              25h
openebs-cstor-csi-node-xv9th                      2/2     Running   0              25h
openebs-cstor-admission-server-7d89bb76bf-bmd2m   1/1     Running   0              25h
openebs-cstor-csi-node-xt9jv                      2/2     Running   0              25h
openebs-localpv-provisioner-7576d8cbcf-6nbl8      1/1     Running   14 (18m ago)   25h
openebs-cstor-csi-controller-0                    6/6     Running   12 (18m ago)   25h
root@atlas00:~# kubectl get nodes
NAME      STATUS   ROLES                  AGE   VERSION
atlas08   Ready    worker                 26h   v1.26.3+k3s1
atlas06   Ready    worker                 26h   v1.26.3+k3s1
atlas04   Ready    worker                 26h   v1.26.3+k3s1
atlas00   Ready    control-plane,master   26h   v1.26.3+k3s1
atlas02   Ready    worker                 26h   v1.26.3+k3s1
root@atlas00:~# lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description:    Ubuntu 22.04.2 LTS
Release:        22.04
Codename:       jammy

**Tags:** kubernetes, storage, k3s, distributed-systems


---

## 1 answers

### Answer by username_1 on 2023-04-25. Score: 1

If users have a strict firewall setup on their Kubernetes nodes, the provisioning of a PV from a storageclass backed by a cStor storage pool may fail. The pool can be created without any issue and even the storage class is created, but the PVs may stay in pending state indefinitely. you may need to check the openebs-provisioner log.

Workaround:

This issue has currently only been observed, if the underlying node uses a network bridge and if the setting net.bridge.bridge-nf-call-iptables=1 in the /etc/sysctl.conf is present. The aforementioned setting is required in some Kubernetes installations, such as the Rancher Kubernetes Engine (RKE).

To avoid this issue, open the port 5656/tcp on the nodes that run the OpenEBS API pod. Alternatively, removing the network bridge might work.

NB: this solution is from the docs and the link is:<https://openebs.io/docs/main/troubleshooting/volume-provisioning#persistent-volumes-indefinitely-remain-in-pending-state>


---

