2020-10-09 00:38:20 UTC - Mike Ludwig: Getting some SSL errors on the controller, and when creating an alarm trigger. Details in thread. Any help appreciated. https://openwhisk-team.slack.com/archives/C4J3R7JFL/p1602203900009800?thread_ts=1602203900.009800&cid=C4J3R7JFL ---- 2020-10-09 00:38:57 UTC - Mike Ludwig: When running this command ```wsk trigger create getvolumes-trigger --feed /whisk.system/alarms/alarm --param cron '0 * * * *'``` I get this error in the response: ```"response": { "result": { "error": { "code": "ENOTFOUND", "errno": "ENOTFOUND", "host": "https", "hostname": "https", "message": "getaddrinfo ENOTFOUND https https:443", "name": "Error", "port": 443, "stack": "Error: getaddrinfo ENOTFOUND https https:443\n at errnoException (dns.js:28:10)\n at GetAddrInfoReqWrap.onlookup [as oncomplete] (dns.js:76:26)", "syscall": "getaddrinfo" } }, "size": 344, "status": "application error", "success": false },``` https://openwhisk-team.slack.com/archives/C4J3R7JFL/p1602203937009900?thread_ts=1602203900.009800&cid=C4J3R7JFL ---- 2020-10-09 00:41:25 UTC - Mike Ludwig: Additionally, I see this SSL handshake error in the logs of the openwhisk-controller-0 pod: ```[2020-10-09T00:22:41.102Z] [INFO] Querying for pods with label selector: [name=openwhisk-controller]. Namespace: [openwhisk]. Port: [None] [2020-10-09T00:22:41.177Z] [WARN] Resolve attempt failed! Cause: javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure``` The only thing configured to use SSL in the setup is an AWS ALB that points to the K8s ingress. https://openwhisk-team.slack.com/archives/C4J3R7JFL/p1602204085010100?thread_ts=1602203900.009800&cid=C4J3R7JFL ---- 2020-10-09 00:46:48 UTC - Mike Ludwig: Helm config: ```whisk: ingress: domain: redacted apiHostName: redacted apiHostPort: 443 apiHostProto: https type: Standard # annotations: # <http://traefik.ingress.kubernetes.io/router.entrypoints|traefik.ingress.kubernetes.io/router.entrypoints>: websecure # <http://traefik.ingress.kubernetes.io/router.tls|traefik.ingress.kubernetes.io/router.tls>: "true" auth: system: "redacted" guest: "redacted" containerPool: userMemory: "10240m" limits: actionsInvokesConcurrent: 200 actionsInvokesPerminute: 200 triggersFiresPerminute: 200 actions: time: max: "60m" memory: max: "8192m" concurrency: max: 4
k8s: dns: kube-dns.kube-system docker: registry: name: "redacted" username: "redacted" password: "redacted" zookeeper: replicaCount: 3 kafka: replicaCount: 3 db: external: true wipeAndInit: true protocol: "http" host: "couchdb-svc-couchdb.couchdb.svc.cluster.local" port: 5984 auth: username: "redacted" password: "redacted" nginx: httpsNodePort: 443 replicaCount: 3 controller: replicaCount: 3 invoker: jvmHeapMB: "2048" containerFactory: impl: "docker" enableConcurrency: true``` https://openwhisk-team.slack.com/archives/C4J3R7JFL/p1602204408010300?thread_ts=1602203900.009800&cid=C4J3R7JFL ---- 2020-10-09 05:50:35 UTC - Keerthi Kumar S R: hostname is missing here ```https:443``` https://openwhisk-team.slack.com/archives/C4J3R7JFL/p1602222635010600?thread_ts=1602203900.009800&cid=C4J3R7JFL ---- 2020-10-09 05:51:43 UTC - Keerthi Kumar S R: make sure this part of config is correct ```whisk: ingress: domain: redacted apiHostName: redacted``` https://openwhisk-team.slack.com/archives/C4J3R7JFL/p1602222703010800?thread_ts=1602203900.009800&cid=C4J3R7JFL ----