Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[bitnami/redis-cluster] cannot use tls #14673

Closed
deveshk0 opened this issue Jan 31, 2023 · 6 comments
Closed

[bitnami/redis-cluster] cannot use tls #14673

deveshk0 opened this issue Jan 31, 2023 · 6 comments
Assignees
Labels
redis-cluster solved stale 15 days without activity tech-issues The user has a technical issue about an application

Comments

@deveshk0
Copy link
Contributor

deveshk0 commented Jan 31, 2023

Name and Version

bitnami/redis-cluster all versions

What steps will reproduce the bug?

  • Create a redis cluster with tls true.
  • connect with any client using internal service or headless service.

Client throws error - ERROR (x509: certificate is valid for 127.0.0.1, not 10.233.79.29)

Client is expecting POD_IP to be part of the certificate as it is offered by redis cluster.

Since certificate is generated before, we cannot add POD_IP to teh certificate, I guess we should mongodb approach and generate certificates as part of init container

Are you using any custom parameters or values?

tls:
  enabled: true
  authClients: true
  autoGenerated: true

What is the expected behavior?

TLS Communication should worl

What do you see instead?

ERROR (x509: certificate is valid for 127.0.0.1, not 10.233.79.29)

Additional information

No response

@deveshk0 deveshk0 added the tech-issues The user has a technical issue about an application label Jan 31, 2023
@bitnami-bot bitnami-bot added this to Triage in Support Jan 31, 2023
@github-actions github-actions bot added the triage Triage is needed label Jan 31, 2023
@javsalgar javsalgar moved this from Triage to In progress in Support Feb 1, 2023
@github-actions github-actions bot added in-progress and removed triage Triage is needed labels Feb 1, 2023
@bitnami-bot bitnami-bot assigned corico44 and unassigned javsalgar Feb 1, 2023
@corico44
Copy link
Contributor

corico44 commented Feb 6, 2023

Hello @deveshk0,

As you mention in the issue itself: "Since certificate is generated before, we cannot add POD_IP to the certificate, I guess we should mongodb approach and generate certificates as part of init container", have you tried to solve it with that approach?

@github-actions github-actions bot moved this from In progress to Pending in Support Feb 6, 2023
@deveshk0
Copy link
Contributor Author

deveshk0 commented Feb 8, 2023

I am looking into integrating this - redis/redis#9530

@github-actions
Copy link

This Issue has been automatically marked as "stale" because it has not had recent activity (for 15 days). It will be closed if no further activity occurs. Thanks for the feedback.

@github-actions github-actions bot added the stale 15 days without activity label Feb 24, 2023
@corico44 corico44 added pending and removed stale 15 days without activity pending labels Feb 28, 2023
@deveshk0
Copy link
Contributor Author

deveshk0 commented Mar 9, 2023

Added - bitnami/containers#26832

@github-actions
Copy link

This Issue has been automatically marked as "stale" because it has not had recent activity (for 15 days). It will be closed if no further activity occurs. Thanks for the feedback.

@github-actions github-actions bot added the stale 15 days without activity label Mar 25, 2023
@github-actions
Copy link

Due to the lack of activity in the last 5 days since it was marked as "stale", we proceed to close this Issue. Do not hesitate to reopen it later if necessary.

@bitnami-bot bitnami-bot closed this as not planned Won't fix, can't repro, duplicate, stale Mar 30, 2023
@bitnami-bot bitnami-bot moved this from In progress to Solved in Support Mar 30, 2023
@github-actions github-actions bot removed this from Solved in Support Mar 31, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
redis-cluster solved stale 15 days without activity tech-issues The user has a technical issue about an application
Projects
None yet
Development

No branches or pull requests

4 participants