-
-
Notifications
You must be signed in to change notification settings - Fork 232
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
CRASH REPORT with VerneMQ Helm Install #332
Comments
@jensjohansen You're using the same file as 👉 Thank you for supporting VerneMQ: https://github.com/sponsors/vernemq |
I will work on that. The HELM install instructions say that cert-manager inserts the ca sert into the tls cert, and I see that, but they also say the secret is supposed to have three keys internally (ca.crt, tls.cert and tls.key), but the current version of cert-manager seems to create a secret with all three items in one key. |
Still an issue. Even removing these still causes the problem.
In the Helm instructions, the documentation says that the cert-manager inserts the ca.crt in the secret along with the tls.crt and tls.crt, and shows the expected format of the secret. However, when you create the certificate using the Certificate CRD that used letsencrypt, the resulting secret has only two keys: tls.crt and tls.key. There are actually three certs in tls.key - the authorization chain up to letsencrypt-production. I have tried extracting the ca.crt out into a separate key following the pattern suggested for using existing keys, but this still gets exactly the same results:
Even a hint as to what the line 221 error means would help. I am guessing I will have to dig into the code next to make progress. |
Solution: Contrary to the documentation, cert-manager doesn't add the CA cert to the certificate file. To stop the CRASH Reports using the cert-manager 1.9.1 and later:
using your DevOps email you set up as your LetsEncrypt account, and the name of your internet-accessible ingress controller.
|
@jensjohansen Thank you for documenting your solution! so is there anything wrong or incomplete in our documentation still? 👉 Thank you for supporting VerneMQ: https://github.com/sponsors/vernemq |
Crash Report:
Installation: VerneMQ Helm Chart version 1.8.0
cert-manager Certificate CRD (verified a valid Letsencrypt cert is stored in mqtt-link-labs-tls-secret):
values.yaml
Expected Behavior:
MQTT Explorer can connect to, and browse topics in
API available on https://dev-mqtt.amz-link-labs.net:8888
Actual Behavior
The text was updated successfully, but these errors were encountered: