Temporal can't connect to Elasticsearch with enabled TLS

[dhiaayachi]

Expected Behavior

Temporal cluster establishes connection with Elasticsearch.

Actual Behavior

"no ElasticSearch node available"

Steps to Reproduce the Problem

1. Setup elastic 8 version with enabled TLS on the HTTP layer
2. Set scheme: "https" in Temporal server config

       elasticsearch:
         version: "v8"
         url:
           scheme: "https"

Specifications

• Temporal Version: 1.21.3
• Elasticsearch Version: 8.6.2
• Platform: Kubernetes

[dhiaayachi]

Thanks for reporting this issue.

The error you're getting suggests that your Temporal cluster is unable to connect to Elasticsearch. Given that you've configured TLS for both Temporal and Elasticsearch, this could be due to a mismatch in certificate verification settings or a problem with your TLS setup.

To start troubleshooting, please provide the following information:

• Elasticsearch logs: Share the Elasticsearch logs for any errors related to TLS.
• Temporal server logs: Share the Temporal server logs for any errors related to connecting to Elasticsearch.
• TLS certificate details: Can you confirm the names specified in the CN (Common Name) field of both the Temporal and Elasticsearch certificates? They should match the hostname used in the url configuration.
• TLS configuration: Share the complete Elasticsearch TLS configuration, including any settings for certificate verification.

Once we have this information, we can help you debug the issue further.