Bug 1739227 - logging - redeploy certs did not update destinationCACert in kibana route
Summary: logging - redeploy certs did not update destinationCACert in kibana route
Keywords:
Status: CLOSED DUPLICATE of bug 1739228
Alias: None
Product: OpenShift Container Platform
Classification: Red Hat
Component: Installer
Version: 3.11.0
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
: ---
Assignee: Russell Teague
QA Contact: Johnny Liu
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2019-08-08 19:23 UTC by Rich Megginson
Modified: 2019-08-08 20:22 UTC (History)
0 users

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2019-08-08 20:22:53 UTC
Target Upstream Version:
Embargoed:

Attachments (Terms of Use)

Description Rich Megginson 2019-08-08 19:23:11 UTC 
Description of problem:

observed TLS errors in the kibana-proxy logs.

http: TLS handshake error from 10.130.6.1:57108: remote error: tls: error decrypting message

Extracted the destinationCACert in the logging-kibana route and compared it to the ca cert in the logging-kibana-proxy secret.  The one from the secret was newer than the one from the route.  After updating the destinationCACert in the logging-kibana route and restarting the kibana pod, the error went away.

Version-Release number of the following components:
3.11
rpm -q openshift-ansible
rpm -q ansible
ansible --version

How reproducible:

Steps to Reproduce:
1.
2.
3.

Actual results:
Please include the entire output from the last TASK line through the end of output if an error is generated

Expected results:

Additional info:
Please attach logs from ansible-playbook with the -vvv flag
Comment 1 Russell Teague 2019-08-08 20:22:53 UTC 

*** This bug has been marked as a duplicate of bug 1739228 ***
Note You need to log in before you can comment on or make changes to this bug.