Uploaded image for project: 'Couchbase Kubernetes'
  1. Couchbase Kubernetes
  2. K8S-509

TLS secret volume not mounted when using persistent volumes

    XMLWordPrintable

Details

    • Bug
    • Status: Closed
    • Test Blocker
    • Resolution: Fixed
    • None
    • 1.0.0
    • operator
    • None

    Description

      Repro:

      Create a TLS enabled cluster that uses persistent volumes.

      Operator will fail to start the node with this error:

      time="2018-08-03T23:25:45Z" level=warning msg="reload server cert: failed with error [Server Error 400 (test-couchbase-0qchp-0000.test-couchbase-0qchp.default.svc:8091/node/controller/reloadCertificate): [body - Client error processing response]] ...retrying" cluster-name=test-couchbase-0qchp module=cluster

       

      Doing  a describe on the initial CB pod shows that the tls secret is never mounted.

      Attachments

        No reviews matched the request. Check your Options in the drop-down menu of this sections header.

        Activity

           

          Fixed, the Persistent volume mounts were overriding tls.  With fix:

           volumes:
            - name: couchbase-server-tls
              secret:
                defaultMode: 420
                secretName: couchbase-server-tls
            - name: pvc-couchbase-cb-example-0000-00-default
              persistentVolumeClaim:
                claimName: pvc-couchbase-cb-example-0000-00-default

          http://review.couchbase.org/97819

          tommie Tommie McAfee added a comment -   Fixed, the Persistent volume mounts were overriding tls.  With fix:  volumes:   - name: couchbase-server-tls     secret:       defaultMode: 420       secretName: couchbase-server-tls   - name: pvc-couchbase-cb-example- 0000 - 00 - default     persistentVolumeClaim:       claimName: pvc-couchbase-cb-example- 0000 - 00 - default http://review.couchbase.org/97819

          People

            tommie Tommie McAfee
            korrigan.clark Korrigan Clark (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Gerrit Reviews

                There are no open Gerrit changes

                PagerDuty