AsterionDocumentation v0.4.1

Troubleshooting

The usual causes when something does not show up.

A satellite stays “awaiting enrollment”

  • Container log: docker logs pulsar-…. cannot reach Polaris → DNS, firewall or proxy between satellite and POLARIS_URL.
  • POLARIS_URL must use https:// → use the HTTPS URL, or set both lab switches.
  • Polaris rejected the credentials → copy id and secret again from the snippet; a regenerated snippet invalidates the old one.
  • bound to another Pulsar instance (409) → the credentials were used by another container. Reset enrollment in Polaris and deploy the new snippet.

A satellite is offline

No heartbeat for POLARIS_SATELLITE_OFFLINE_AFTER seconds. Check the container, its outbound connection and the satellite log in Polaris. Plans keep running on the satellite; results are uploaded when it reconnects.

Check now is greyed out

Immediate checks need the websocket: BROADCAST_CONNECTION=reverb, POLARIS_WS_URL set and reachable from the satellite (WSS through your proxy with websocket upgrade), and the satellite online with ws_connected. Otherwise Polaris runs in HTTPS-only mode.

A plan does not run on a satellite

Open the plan: plan health shows the last run per satellite. Common causes:

  • the product of the plan is switched off for the tenant,
  • the satellite is global and the targets are private addresses,
  • the satellite is IPv4-only and the targets are IPv6 (or the reverse),
  • the check type does not fit the targets (e.g. ping on a network),
  • a minimum interval is larger than the schedule’s interval: slots are skipped on purpose.

Runs stay “running”

A run the satellite no longer reports is ended as interrupted after 10 quiet minutes; one-shot jobs after 2 hours without progress, scheduled runs after 26 hours. A slow (stretched) port scan may legitimately run for many hours.

crt.sh errors on a domain

crt.sh is often overloaded. Polaris retries with backoff and spreads requests; the domain shows the last error. Nothing to do unless it persists for days.

Debug output

Enable Store debug output on a plan: every command a satellite runs is stored with the run, with exit code and output.