Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Platform] Slow queries not working for TLS enabled queries in 2.7.0.0 #8029

Open
VijiYB opened this issue Apr 14, 2021 · 4 comments
Open

[Platform] Slow queries not working for TLS enabled queries in 2.7.0.0 #8029

VijiYB opened this issue Apr 14, 2021 · 4 comments
Assignees
@andrewc-dev
Labels
area/platform Yugabyte Platform priority/high High Priority QA QA filed bugs
Projects
Platform
Milestone
2.7.x

Comments

@VijiYB
Copy link

VijiYB commented Apr 14, 2021

Suddenly slowqueries are not showing up all queries, some universe it is showing 2 queries and in some universe no queries eventhough we can see some live queries running on.

Observed this on 2.7.0.0-b17. Seems to be a regression.

@streddy-yb - Please prioritize this
@streddy-yb streddy-yb added the area/platform Yugabyte Platform label Apr 14, 2021
@streddy-yb streddy-yb added this to the 2.7.x milestone Apr 14, 2021
@streddy-yb streddy-yb added this to To do in Platform Apr 14, 2021
@streddy-yb streddy-yb added the priority/high High Priority label Apr 14, 2021
@VijiYB
Copy link
Author

VijiYB commented May 25, 2021

This happened for universe with TLS enabled. For non-TLS its working fine.

@yb-andrew - I know you were working on this, but are you tracking this in a separate GH issue?

@streddy-yb streddy-yb changed the title [Platform] Slow queries not showing all the queries on 2.7.0.0 [Platform] Slow queries not working for TLS enabled queries on 2.7.0.0 May 25, 2021
@streddy-yb
Copy link
Contributor

hi @VijiYB - Did you observer this on 2.7.1.1 build?

@streddy-yb streddy-yb changed the title [Platform] Slow queries not working for TLS enabled queries on 2.7.0.0 [Platform] Slow queries not working for TLS enabled queries in 2.7.0.0 May 25, 2021
@VijiYB
Copy link
Author

VijiYB commented May 25, 2021

Yes, same behavior on 2.7.1.1 as well.

andrewc-dev pushed a commit that referenced this issue Jun 7, 2021
[#8029][YW] Fix slow queries failing to fetch on client-to-node TLS e…
8875b62 
…ncrypted universes

Summary:
This issue was observed on 2.7 branch and observed again on master branch with 2.7.0-b17
database version. When client-to-node TLS encryption is enabled on the universe, the fetching of
slow queries fails with 500 error. Upon further digging, the error is caused by pg_hba.conf not
allowing the YW ip address with SSL off. When just the "ssl" = true parameter is added, a different
error was thrown: `org.postgresql.util.PSQLException: SSL error: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target`. As a result, the "sslmode" = "require" was added and found to work.

Test Plan:
Create universe with Client-To-Node encryption enabled. Go to the overview page and check
the network logs. The slow_queries API request should not throw an error.

Reviewers: arnav, spotachev, sanketh

Reviewed By: spotachev

Subscribers: jenkins-bot, yugaware

Differential Revision: https://phabricator.dev.yugabyte.com/D11333
@streddy-yb streddy-yb moved this from To do to Needs Backport in Platform Jun 14, 2021
andrewc-dev pushed a commit that referenced this issue Jun 21, 2021
[Backport 2.6][#8029] Fix slow queries failing to fetch on client-to-…
c93d3a3 
…node TLS encrypted universes

Summary:
This issue was observed on 2.7 branch and observed again on master branch with 2.7.0-b17
database version. When client-to-node TLS encryption is enabled on the universe, the fetching of
slow queries fails with 500 error. Upon further digging, the error is caused by pg_hba.conf not
allowing the YW ip address with SSL off. When just the "ssl" = true parameter is added, a different
error was thrown: `org.postgresql.util.PSQLException: SSL error: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target`. As a result, the "sslmode" = "require" was added and found to work.

Test Plan:
Create universe with Client-To-Node encryption enabled. Go to the overview page and check
the network logs. The slow_queries API request should not throw an error.

Reviewers: arnav, spotachev, sanketh

Reviewed By: spotachev

Subscribers: jenkins-bot, yugaware

Differential Revision: https://phabricator.dev.yugabyte.com/D11333
@streddy-yb streddy-yb moved this from Needs Backport to Needs QA/Docs in Platform Jun 22, 2021
@Arpit-yb
Copy link
Contributor

Arpit-yb commented Jun 24, 2021 •
edited
Loading

Tested by doing these steps

  1. created a universe
  2. Ran sample-apps
  3. queries -> Slow queries(Visible)
  4. Deleted the Universe
  5. Created a Universe with TLS on
  6. Ran sample-apps
  7. queries -> Slow queries(Visible)

Works fine now
tested in 2.6 and 2.7

@Arpit-yb Arpit-yb moved this from Needs QA/Docs to Closed in Platform Jun 24, 2021
@VijiYB VijiYB added the QA QA filed bugs label Aug 11, 2021
@ryan-ally ryan-ally mentioned this issue Nov 15, 2023
Open
@nyndyny nyndyny mentioned this issue Nov 15, 2023
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@andrewc-dev andrewc-dev

Labels
area/platform Yugabyte Platform priority/high High Priority QA QA filed bugs
Projects
Platform
  
Closed
Milestone
2.7.x
Development

No branches or pull requests
6 participants
@rthallamko3 @andrewc-dev @Arpit-yb @streddy-yb @VijiYB @hsu880