juan131
commented
1 week ago Hi @bustersg
I was unable to reproduce the issue. These are the steps I followed:
- I installed the Redis Cluster chart in my local cluster:
$ helm install redis-cluster oci://registry-1.docker.io/bitnamicharts/redis-cluster --set tls.enabled=true,tls.autoGenerated=true
(...)
CHART NAME: redis-cluster
CHART VERSION: 11.0.5
APP VERSION: 7.4.0
(...)- Checked that TLS was enabled:
$ kubectl get sts redis-cluster -o yaml
(...)
- name: REDIS_TLS_ENABLED
value: "yes"
- name: REDIS_TLS_PORT_NUMBER
value: "6379"
- name: REDIS_TLS_AUTH_CLIENTS
value: "yes"
- name: REDIS_TLS_CERT_FILE
value: /opt/bitnami/redis/certs/tls.crt
- name: REDIS_TLS_KEY_FILE
value: /opt/bitnami/redis/certs/tls.key
- name: REDIS_TLS_CA_FILE
value: /opt/bitnami/redis/certs/ca.crt
(...)
volumeMounts:
(...)
- mountPath: /opt/bitnami/redis/certs
name: redis-certificates
readOnly: true
(...)
volumes:
(...)
- name: redis-certificates
secret:
defaultMode: 256
secretName: redis-cluster-crt
(...)
$ kubectl get secret redis-cluster-crt -o json | jq .data
{
"ca.crt": "XXX",
"tls.crt": "YYY",
"tls.key": "ZZZ"
}- Look for the error you reported with no results:
$ kubectl logs sts/redis-cluster | grep "Error accepting a client connection"
bustersg
Name and Version
bitnami/redis-cluster 11.04
What architecture are you using?
amd64
What steps will reproduce the bug?
For Openshift deployment, Update tls section in vanilla 11.03 or 11.04 values.yaml
helm install -f values.yaml redis-cluster ./ -n redis-dev3 masters and 3 slaves (6/6) but some pods logs keep generating
Error accepting a client connection: error:0A00010B:SSL routines::wrong version number (addr=127.0.0.1:xxxxxx laddr=127.0.0.1:6379)every 1 second.Tried 3 ways but still same outcomes:
opensslmethod to generate CA Certificate and KeyautoGenerated: truein values.yamlAll 3 methods got 6 pods up and running but always some pods got the SSL wrong version number every second.
Are you using any custom parameters or values?
What is the expected behavior?
You should not see this type of error (at least not on
autoGenerated: true)What do you see instead?
Additional information
I tried adding and playing with these TLS config in values.yaml but it still did not work.