search

fmartinou / whats-up-docker

What's up Docker ( aka WUD ) gets you notified when a new version of your Docker Container is available.
https://fmartinou.github.io/whats-up-docker
MIT License
983 stars 32 forks source link

Error reading docker api with TLS (unable to get issuer certificate) #296

Open DutchForeigner opened 1 year ago

DutchForeigner commented 1 year ago

I have the docker API setup with TLS and configured the hub watchers with the same certificates (wildcard domain *.nexusnet.me cert from Letsencrypt). 5 node docker swarm cluster. WUD configured with 5 watchers. WUD is not able to read from docker. Any suggestion on how to get this to work?

The logs show these errors for each node:

Error when trying to get the list of the containers to watch (unable to get issuer certificate)
unable to get issuer certificate (err.code=UNABLE_TO_GET_ISSUER_CERT)

Verifying the API from the command line works ok:

sudo docker --tlsverify \
    --tlscacert=/mnt/docker-data/certificates/certs/chain.pem \
    --tlscert=/mnt/docker-data/certificates/certs/fullchain.pem \
    --tlskey=/mnt/docker-data/certificates/certs/privkey.pem \
    -H=192.168.0.116:2376 version

I'm using a glusterfs plugin for the data/volume mappings. I did try also with direct folder mapping and issue is the same.

Logs: _wud_whatsupdocker.1.lcpoizpki2fg7i44r13jffcdj_logs.txt

Docker stack file (with WUD config): wud-stack.yaml.txt