Sunday, 2024-11-10

EugenMayer440180If anybody has an idea: upgrading 2024.1 to 2024.2 which failed on starting proxysql (pull/precheck) worked fine. Turned out to be an issue with the root.crt and thus seems to be related to my TLS config ( https://gist.github.com/EugenMayer/2d48f79ccb69e57de8008beee99b4057 ). I assume it is related to me setting kolla_tls_backend_cert /09:12
EugenMayer440180kolla_tls_backend_key and thus no certificates are generated and then none are copied. The need of the root.crt is new with 2024.2 - thank you for any help!09:12
EugenMayer440180Well i found out that the certifcates task, if used, is the one responsible to generate certificates (if non are provided) and the task that copies the certificates to all the places like proxy-sql. Not using the task certificates but using provided offical certificates like i did, does not do that and should not (at least not for the root.crt,11:08
EugenMayer440180since that is part of the official cert chain), but the new services mariadb/proxysql rely on the existence of that file and fail11:08

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!