Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 1438033

Summary:	503's being reported, logs of edge terminated route in router logs and TLS handshake errors
Product:	OpenShift Container Platform	Reporter:	Max Whittingham <mwhittin>
Component:	Networking	Assignee:	Ben Bennett <bbennett>
Networking sub component:	router	QA Contact:	zhaozhanqi <zzhao>
Status:	CLOSED DUPLICATE	Docs Contact:
Severity:	high
Priority:	unspecified	CC:	aos-bugs, eparis, jgoulding
Version:	3.4.1	Keywords:	OpsBlocker
Target Milestone:	---
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2017-04-18 15:41:59 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Max Whittingham 2017-03-31 16:52:04 UTC

Description of problem:
Users are reporting problems of 503's on their applications, noticing lots of TLS handshake errors in the api logs, and 'a edge terminated route with host $somedomain does not have the required certificates.  The route will still be created but no certificates will be written' logs from the routers

Version-Release number of selected component (if applicable):
atomic-openshift-3.4.1.10-1.git.0.c96aed3.el7.x86_64

Comment 3 zhaozhanqi 2017-04-01 07:45:09 UTC

hi, Max Whittingham 

From the logs:a edge terminated route with host $somedomain does not have the required certificates.  The route will still be created but no certificates will be written

that's mean NO match cert for the host name. so I guess you did not specified a default cert when creating router.   if you using 'oadm router --default-cert=', then the logs will be disappeared.


about the 503 error. I think it is another issue. but from the haproxy.config, they are working well. could you provide more info (eg which route return 503).

Comment 4 Ben Bennett 2017-04-10 21:53:19 UTC

This is probably https://bugzilla.redhat.com/show_bug.cgi?id=1440977

Comment 5 Ben Bennett 2017-04-18 15:41:59 UTC


*** This bug has been marked as a duplicate of bug 1440977 ***