Description of problem: observed TLS errors in the kibana-proxy logs. http: TLS handshake error from 10.130.6.1:57108: remote error: tls: error decrypting message Extracted the destinationCACert in the logging-kibana route and compared it to the ca cert in the logging-kibana-proxy secret. The one from the secret was newer than the one from the route. After updating the destinationCACert in the logging-kibana route and restarting the kibana pod, the error went away. Version-Release number of the following components: 3.11 rpm -q openshift-ansible rpm -q ansible ansible --version How reproducible: Steps to Reproduce: 1. 2. 3. Actual results: Please include the entire output from the last TASK line through the end of output if an error is generated Expected results: Additional info: Please attach logs from ansible-playbook with the -vvv flag
*** Bug 1739227 has been marked as a duplicate of this bug. ***
In 3.11.141, I can see the destinationCACert was updated by redeploy certs playbooks. and kibana is accessable. So move to verified.
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2019:2580