Uploaded image for project: 'Couchbase Kubernetes'
  1. Couchbase Kubernetes
  2. K8S-2267

TLS error when using tls.generate=true in Helm Chart 2.2

    XMLWordPrintable

Details

    • Task
    • Resolution: Fixed
    • Major
    • None
    • None
    • helm, kubernetes
    • None
    • 1

    Description

      Background
      Customer is deploying Couchbase Server with tls.generate=true with Helm Chart and LoadBalancer.

      helm upgrade --install apicbdev -n couchbase --values values_dev.yaml couchbase/couchbase-operator

      tls:
      generate: true
      expiration: 365

      cluster:
      networking:
      adminConsoleServiceType: LoadBalancer
      exposedFeatureServiceType: LoadBalancer

      Problem

      The following error would occur

      {"level":"info","ts":1623863121.2887464,"logger":"cluster","msg":"Reconciliation failed","cluster":"couchbase/apicbdev-couchbase-cluster","error":"unexpected status code: request failed POST https://apicbdev-couchbase-cluster-0002.apicbdev-couchbase-cluster.couchbase.svc:18091/settings/security 400 Bad Request: {\"errors\":[\"tlsMinVersion - Supported TLS versions are tlsv1.2, tlsv1.1, tlsv1\"]}","stack":"github.com/couchbase/couchbase-
      

      This seems to be related to the combination of DNS and TLs version of the chart.

      Logs
      s3://cb-customers-secure/swiss-shakti-foundation/40319/2021-06-21/cbopinfo-20210621t162717+0000.tar.gz

      config yaml: values_dev_orig.yaml

      Attachments

        No reviews matched the request. Check your Options in the drop-down menu of this sections header.

        Activity

          People

            tommie Tommie McAfee (Inactive)
            tin.tran Tin Tran (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            5 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Gerrit Reviews

                There are no open Gerrit changes

                PagerDuty