Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

start: failed to start Tarantool 3 with encrypted etcd #938

Open
DifferentialOrange opened this issue Sep 7, 2024 · 1 comment
Open
Assignees
Labels
1sp bug Something isn't working

Comments

@DifferentialOrange
Copy link
Member

Config file:

config:
  etcd:
    endpoints:
    - https://localhost:2379
    ssl:
      verify_peer: false
      ca_file: /home/moiseevgeorgy/Development/github/tarantool/cluster-federation/test/integration/ssl_cert/ca.crt
      ssl_key: /home/moiseevgeorgy/Development/github/tarantool/cluster-federation/test/integration/ssl_cert/localhost.key
      ca_path: /home/moiseevgeorgy/Development/github/tarantool/cluster-federation/test/integration/ssl_cert
      verify_host: false
      ssl_cert: /home/moiseevgeorgy/Development/github/tarantool/cluster-federation/test/integration/ssl_cert/localhost.crt
    prefix: /cluster_a/
tt start test_app
   ⨯ can't collect instance information for test_app: error loading instance "cluster_a-storage-2-2" configuration from config "/home/moiseevgeorgy/Development/github/tarantool/cluster-federation/instances.enabled/test_app/config.yaml": unable to connect to etcd: fail to create tls client config: KeyFile and CertFile must both be present[key: /home/moiseevgeorgy/Development/github/tarantool/cluster-federation/test/integration/ssl_cert/localhost.key, cert: ]
@DifferentialOrange DifferentialOrange added bug Something isn't working 1sp labels Sep 7, 2024
@oleg-jukovec
Copy link
Contributor

oleg-jukovec commented Sep 7, 2024

tt/lib/cluster/paths.go

Lines 49 to 54 in ba846d8

[]string{"config", "etcd", "ssl", "ca_file"},
[]string{"config", "etcd", "ssl", "ca_path"},
[]string{"config", "etcd", "ssl", "ssl_cert"},
[]string{"config", "etcd", "ssl", "ssl_key"},
[]string{"config", "etcd", "ssl", "verify_host"},
[]string{"config", "etcd", "ssl", "verify_peer"},

We need to rename cert_file -> ssl_cert:

tt/lib/cluster/cluster.go

Lines 130 to 137 in ba846d8

Ssl struct {
KeyFile string `yaml:"ssl_key"`
CertFile string `yaml:"cert_file"`
CaPath string `yaml:"ca_path"`
CaFile string `yaml:"ca_file"`
VerifyPeer bool `yaml:"verify_peer"`
VerifyHost bool `yaml:"verify_host"`
} `yaml:"ssl"`

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
1sp bug Something isn't working
Projects
None yet
Development

No branches or pull requests

3 participants