Bug 1904380: Forwarding logs to Kafka using Chained certificates fails with error "state=error: certificate verify failed (unable to get local issuer certificate) #2068
Conversation
openshift-ci-robot
added
the
do-not-merge/work-in-progress
|
Please create a patch fix like https://github.com/openshift/origin-aggregated-logging/pull/1993/files and prepare an upstream fix against https://github.com/fluent/fluent-plugin-kafka . There was an upstream issue for this but I can not seem to find it |
That would be fluent/fluent-plugin-kafka#287 |
…ls with error "state=error: certificate verify failed (unable to get local issuer certificate)"
syedriko
changed the title
openshift-ci-robot
removed
the
do-not-merge/work-in-progress
|
/test smoke |
|
/test smoke |
1 similar comment
|
/test smoke |
|
@jcantrill lgtm this please |
|
/approve |
openshift-ci-robot
added
the
approved
|
/lgtm |
|
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: jcantrill, syedriko The full list of commands accepted by this bot can be found here. The pull request process is described here
Needs approval from an approver in each of these files:
Approvers can indicate their approval by writing |
|
/retest Please review the full test history for this PR and help us cut down flakes. |
5 similar comments
|
/retest Please review the full test history for this PR and help us cut down flakes. |
|
/retest Please review the full test history for this PR and help us cut down flakes. |
|
/retest Please review the full test history for this PR and help us cut down flakes. |
|
/retest Please review the full test history for this PR and help us cut down flakes. |
|
/retest Please review the full test history for this PR and help us cut down flakes. |
syedriko
changed the title
|
/cherrypick release-4.6 |
|
@syedriko: new pull request created: #2083 In response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. |
|
/cherrypick release-4.7 |
|
@syedriko: new pull request created: #2084 In response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. |
|
/cherrypick release-5.0 |
|
@syedriko: new pull request created: #2085 In response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. |
syedriko
changed the title
|
@syedriko: Some pull requests linked via external trackers have merged: The following pull requests linked via external trackers have not merged:
These pull request must merge or be unlinked from the Bugzilla bug in order for it to move to the next state. Once unlinked, request a bug refresh with Bugzilla bug 1904380 has not been moved to the MODIFIED state. In response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. |
Description
Configuring log forwarding to Kafka over TLS and specifying a ca_bundle.crt with multiple concatenated PEM files results in the following error:
2020-11-27 12:26:36 +0000 [warn]: Send exception occurred: SSL_connect returned=1 errno=0 state=error: certificate verify failed (unable to get local issuer certificate)
/cc @vimalk78
/assign @jcantrill
Links