aws-containers / eks-app-mesh-polyglot-demo

End to end deployment and observability of polyglot microservices in Amazon EKS using AWS App Mesh, AWS Fargate, Amazon Cloudwatch Container Insights, and AWS X-Ray
MIT No Attribution
64 stars 636 forks source link

Getting certificate verification error: SSL: CERTIFICATE_VERIFY_FAILED #45

Open shankey28 opened 3 months ago

shankey28 commented 3 months ago

Doing a walkthrough of the blog https://aws.amazon.com/blogs/containers/using-iam-database-authentication-with-workloads-running-on-amazon-eks/

Getting an error after step #9 in the blog.

pymysql.err.OperationalError: (2003, "Can't connect to MySQL server on 'irsa-test-instance.cluster-c1oewrerw6um3jc.us-east-1.rds.amazonaws.com' ([SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate

Downloading the new us-east-1 cert from this page https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.SSL.html#UsingWithRDS.SSL.RegionCertificates

using link: https://truststore.pki.rds.amazonaws.com/us-east-1/us-east-1-bundle.pem

Updating the prodcatalog pod with this cert help resolve the issue.

Suggestion: Update the repo with new certificate