search

Juniper / contrail-charms

Juju charms for Contrail services.
Apache License 2.0
13 stars 22 forks source link

contrail-proxy looks for SSL certificate #72

Closed AshleyLai closed 5 years ago

AshleyLai commented 5 years ago

Does Contrail always required SSL certificate?

contrail-haproxy/1* error idle 22/lxd/0 10.244.49.70 hook failed: "peer-relation-changed"

2019-06-14 04:53:39 INFO juju-log peer:8: enable_monitoring must be set to true for metrics 2019-06-14 04:53:39 DEBUG peer-relation-changed [ALERT] 164/045339 (38934) : parsing [/etc/haproxy/haproxy.cfg:25] : 'bind 192.168.33.15:8143' : unable to load SSL certificate file '/var/lib/haproxy/default.pem' file does not exist. 2019-06-14 04:53:39 DEBUG peer-relation-changed [ALERT] 164/045339 (38934) : Error(s) found in configuration file : /etc/haproxy/haproxy.cfg 2019-06-14 04:53:39 DEBUG peer-relation-changed [ALERT] 164/045339 (38934) : Fatal errors found in configuration. 2019-06-14 04:53:40 INFO juju-log peer:8: HAProxy configuration check failed, exiting. 2019-06-14 04:53:40 ERROR juju.worker.uniter.operation runhook.go:132 hook "peer-relation-changed" failed: exit status 1

Andrey-mp commented 5 years ago

did you set this - juju config haproxy ssl_cert=SELFSIGNED ? please provide options from bundle that are related to controller and haproxy.

Andrey-mp commented 5 years ago

as I see option is absent in contrail-haproxy. it should be set to avoid this error. haproxy ssl_cert=SELFSIGNED