Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

AWSEKSResourceDetector fails to detect resources due to exception "The SSL connection could not be established" #197

Closed
swetharavichandrancisco opened this issue Jan 28, 2022 · 1 comment
Closed

AWSEKSResourceDetector fails to detect resources due to exception "The SSL connection could not be established" #197

swetharavichandrancisco opened this issue Jan 28, 2022 · 1 comment
Labels
comp:extensions.aws Things related to OpenTelemetry.Extensions.AWS

Comments

@swetharavichandrancisco
Copy link
Contributor

AWSEKSResourceDetector fails to detect resources due to api calls when made to extract aws-auth/cluster name from configmap.

Steps that I followed:

I have deployed my sample application and otel-collector as sidecar.

Framework/Environment Used:

  • Sample appplication used is Asp.NET core.
  • Run on EKS Linux

After generating load, I saw traces generated in AWS Xray, but no resources for EKS was generated. I debugged the issue to see what's going on. I got an error saying "The SSL connection could not be established" when a call is made to kubernetes api url via HttpClient and HttpClienHandler.
@swetharavichandrancisco
Copy link
Contributor Author

Working on this issue. Will create a PR and submitted it for review in a couple days

swetharavichandrancisco added a commit to swetharavichandrancisco/opentelemetry-dotnet-contrib that referenced this issue Feb 17, 2022
@swetharavichandrancisco
open-telemetry#197 - AWSEKSResourceDetector fails to detect resources…
41e68d3 
… due to exception "The SSL connection could not be established"

Issue Description:
With the current code, it requires an additional step of installing kubernetes self-signed certificate to the trusted store as .NET core expects them to the trsuted store to make a secure connection.

Fix Provided:
ServerCertificationValidationProvider - Safely loads the certificate to the trusted collection along with ServerSideValidation. This would avoid the unnecessary step of installing the certificate manually.
Handler - Creates HttpClientHandler with client certificate.
@iskiselev iskiselev mentioned this issue Mar 8, 2022
Merged
swetharavichandrancisco added a commit to swetharavichandrancisco/opentelemetry-dotnet-contrib that referenced this issue Apr 20, 2022
@swetharavichandrancisco
open-telemetry#197 - AWSEKSResourceDetector fails to detect resources…
5083e87 
… due to exception "The SSL connection could not be established"

Issue Description:
With the current code, it requires an additional step of installing kubernetes self-signed certificate to the trusted store as .NET core expects them to the trsuted store to make a secure connection.

Fix Provided:
ServerCertificationValidationProvider - Safely loads the certificate to the trusted collection along with ServerSideValidation. This would avoid the unnecessary step of installing the certificate manually.
Handler - Creates HttpClientHandler with client certificate.

(cherry picked from commit 41e68d3)
@reyang reyang added the comp:extensions.aws Things related to OpenTelemetry.Extensions.AWS label Apr 27, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
comp:extensions.aws Things related to OpenTelemetry.Extensions.AWS
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@reyang @swetharavichandrancisco