balena-io / open-balena

Open source software to manage connected IoT devices at scale
https://balena.io/open
GNU Affero General Public License v3.0
1.06k stars 163 forks source link

make auto-pki Command Takes Excessively Long Time to Complete #203

Closed matiasAS closed 2 months ago

matiasAS commented 4 months ago

Description:

I am experiencing significant delays when running the make auto-pki command on my openBalena setup. The process takes an unusually long time (more than 15 minutes), and it does not seem to complete successfully. Here is a detailed summary of my environment and the steps I have taken:

Environment:

Steps to Reproduce:

1- Set up openBalena following the official documentation. 2- Configure pfSense with HAProxy to handle both HTTP and HTTPS traffic.

Run the following commands:

export ACME_EMAIL=acme@openbalena-sistemasmas-stage.online export CLOUDFLARE_API_TOKEN= make auto-pki

Troubleshooting Steps Taken:

1- Verified connectivity to Cloudflare. 2- Reviewed and adjusted HAProxy configuration to handle HTTP and HTTPS separately. 3- Restarted Docker services. 4- Checked for and removed any self-signed certificates that might be causing conflicts. 5- Verified sufficient system resources (CPU, RAM).

Despite these steps, the issue persists. I would appreciate any guidance or suggestions on how to resolve this problem.

Expected Behavior:

The make auto-pki command should complete in a reasonable amount of time (under 10 minutes), and the API endpoint should be consistently accessible without errors.

Additional Information:

Thank you for your assistance!

Important note: because my English is not good (i from Chile), I have created the content of this issue with the help (copied) of chat gpt @florianluediger @roman-mazur @wrboyce @relaxdiego @dfunckt

ab77 commented 4 months ago

Attached relevant logs and configuration snippets.

There is nothing attached. You can monitor the logs from cert-manager container to see what's going on and where it is failing.

P.S. most of the folks you are pinging have moved on.

matiasAS commented 4 months ago

@ab77 I have another question about the api service? Is there another problem?

ab77 commented 2 months ago

Please move this to the balena Forums, so that the wider community can help with support. GitHub issues are best used for very specific issues with the codebase, ideally discussing around source code/specific lines of code.