Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

etcd tries to connect with TLS even with --etcd.tls=false #456

Closed
whs opened this issue Jun 14, 2016 · 5 comments
Closed

etcd tries to connect with TLS even with --etcd.tls=false #456

whs opened this issue Jun 14, 2016 · 5 comments

Comments

@whs
Copy link

whs commented Jun 14, 2016

Using launch option --web --etcd --etcd.endpoint=10.0.103.50:2379 --etcd.watch --etcd.tls=false --logLevel=DEBUG with the Docker image hosted in Kubernetes:

Name:       traefik-8xn2x
Namespace:  kube-system
Node:       ip-10-0-103-194.ap-southeast-1.compute.internal/10.0.103.194
Start Time: Tue, 14 Jun 2016 15:28:04 +0700
Labels:     k8s-app=traefik-ingress-lb,name=traefik-ingress-lb
Status:     Running
IP:     10.2.89.2
Controllers:    ReplicationController/traefik
Containers:
  traefik:
    Container ID:   docker://18c4381518c5cf7c590f160d04f20d0f6fb7cc92888ad105221f9c8c9c596069
    Image:      traefik
    Image ID:       docker://sha256:b58de5df82c80cb75f44df3bea350ebd925d2e3e1fef47312991a0fb51f1e436
    Ports:      80/TCP, 8080/TCP
    Args:
      --web
      --etcd
      --etcd.endpoint=10.0.103.50:2379
      --etcd.watch
      --etcd.tls=false
      --logLevel=DEBUG
    QoS Tier:
      cpu:      BestEffort
      memory:       BestEffort
    State:      Running
      Started:      Tue, 14 Jun 2016 15:28:07 +0700
    Ready:      True
    Restart Count:  0
    Environment Variables:
Conditions:
  Type      Status
  Ready     True 
Volumes:
  default-token-px0il:
    Type:   Secret (a volume populated by a Secret)
    SecretName: default-token-px0il
Events:
  FirstSeen LastSeen    Count   From                                SubobjectPath           Type        Reason      Message
  --------- --------    -----   ----                                -------------           --------    ------      -------
  14m       14m     1   {default-scheduler }                                        Normal      Scheduled   Successfully assigned traefik-8xn2x to ip-10-0-103-194.ap-southeast-1.compute.internal
  14m       14m     1   {kubelet ip-10-0-103-194.ap-southeast-1.compute.internal}   spec.containers{traefik}    Normal      Pulling     pulling image "traefik"
  14m       14m     1   {kubelet ip-10-0-103-194.ap-southeast-1.compute.internal}   spec.containers{traefik}    Normal      Pulled      Successfully pulled image "traefik"
  14m       14m     1   {kubelet ip-10-0-103-194.ap-southeast-1.compute.internal}   spec.containers{traefik}    Normal      Created     Created container with docker id 18c4381518c5
  14m       14m     1   {kubelet ip-10-0-103-194.ap-southeast-1.compute.internal}   spec.containers{traefik}    Normal      Started     Started container with docker id 18c4381518c5
time="2016-06-14T08:28:07Z" level=info msg="Traefik version v1.0.0-rc2 built on 2016-06-08_12:35:41PM" 
time="2016-06-14T08:28:07Z" level=debug msg="Global configuration loaded {\"GraceTimeOut\":10,\"Debug\":false,\"AccessLogsFile\":\"\",\"TraefikLogsFile\":\"\",\"LogLevel\":\"DEBUG\",\"EntryPoints\":{\"http\":{\"Network\":\"\",\"Address\":\":80\",\"TLS\":null,\"Redirect\":null}},\"Constraints\":[],\"ACME\":null,\"DefaultEntryPoints\":[\"http\"],\"ProvidersThrottleDuration\":2000000000,\"MaxIdleConnsPerHost\":200,\"Retry\":null,\"Docker\":null,\"File\":null,\"Web\":{\"Address\":\":8080\",\"CertFile\":\"\",\"KeyFile\":\"\",\"ReadOnly\":false},\"Marathon\":null,\"Consul\":null,\"ConsulCatalog\":null,\"Etcd\":{\"Watch\":true,\"Filename\":\"\",\"Constraints\":[],\"Endpoint\":\"10.0.103.50:2379\",\"Prefix\":\"/traefik\",\"TLS\":{\"CA\":\"\",\"Cert\":\"\",\"Key\":\"\",\"InsecureSkipVerify\":false}},\"Zookeeper\":null,\"Boltdb\":null,\"Kubernetes\":null}" 
time="2016-06-14T08:28:07Z" level=info msg="Preparing server http &{Network: Address::80 TLS:<nil> Redirect:<nil>}" 
time="2016-06-14T08:28:07Z" level=info msg="Starting provider *main.WebProvider {\"Address\":\":8080\",\"CertFile\":\"\",\"KeyFile\":\"\",\"ReadOnly\":false}" 
time="2016-06-14T08:28:07Z" level=info msg="Starting provider *provider.Etcd {\"Watch\":true,\"Filename\":\"\",\"Constraints\":[],\"Endpoint\":\"10.0.103.50:2379\",\"Prefix\":\"/traefik\",\"TLS\":{\"CA\":\"\",\"Cert\":\"\",\"Key\":\"\",\"InsecureSkipVerify\":false}}" 
time="2016-06-14T08:28:07Z" level=info msg="Starting server on :80" 
time="2016-06-14T08:28:07Z" level=error msg="Error starting provider Failed to load keypair. open : no such file or directory" 

From the source it seemed that --etcd.tls is no longer being supported as the code to set .TLS = nil which used to exists now no longer exists.

@errm
Copy link
Contributor

errm commented Jun 18, 2016

Why are you trying to use the etcd backend in kubernetes?

@whs
Copy link
Author

whs commented Jun 18, 2016

Due to #448 #449 my traefik never get updated with new Ingress controllers.
So I decided that I would try to manually configure it with the already
existing etcd.

On Sat, Jun 18, 2016 at 3:48 PM, Ed Robinson [email protected]
wrote:

Why are you trying to use the etcd backend in kubernetes?


You are receiving this because you authored the thread.
Reply to this email directly, view it on GitHub
#456 (comment),
or mute the thread
https://github.com/notifications/unsubscribe/AAVFiy15_LXuZaok41EgqwD3pToCCTd1ks5qM7DpgaJpZM4I1Fmh
.

@emilevauge emilevauge added the bug label Jun 23, 2016
@emilevauge
Copy link
Member

emilevauge commented Jun 23, 2016

Using the current rc2, you should be able to connect to etcd without TLS removing the --etcd.tls=false part from your command line.

@emilevauge emilevauge removed the bug label Jun 23, 2016
@errm
Copy link
Contributor

errm commented Jun 29, 2016

also #448 and #449 are now fixed . . .

@whs
Copy link
Author

whs commented Jun 29, 2016

Thank you for the fixes

@whs whs closed this as completed Jun 29, 2016
@traefik traefik locked and limited conversation to collaborators Sep 1, 2019
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

No branches or pull requests

4 participants