Uploaded image for project: 'OpenShift Logging'
  1. OpenShift Logging
  2. LOG-5625

x509 certificate verify failure on ingester when trying to flush chunks to external storage

XMLWordPrintable

    • False
    • None
    • False
    • NEW
    • VERIFIED
    • Log Storage - Sprint 254, Log Storage - Sprint 255

      Description:
      When ingester is trying to flush chunks to external storage, it results in certificate verification failureĀ 

      logs:

      level=error ts=2024-06-06T13:46:30.043917339Z caller=flush.go:143 org_id=infrastructure msg="failed to flush" err="failed to flush chunks: store put chunk: RequestError: send request failed\ncaused by: Put \"https://kbharti-myloki.s3.us-east-1.amazonaws.com/infrastructure/5160b1444da13368/18fedcb216c%3A18fedcb5954%3A5dcf1e09\": tls: failed to verify certificate: x509: certificate signed by unknown authority, num_chunks: 1, labels: {kubernetes_container_name=\"network-operator\", kubernetes_host=\"ip-10-0-30-227.us-east-2.compute.internal\", kubernetes_namespace_name=\"openshift-network-operator\", kubernetes_pod_name=\"network-operator-6bfb848b77-qdlnw\", log_type=\"infrastructure\"}"

      Logging version: 5.9.3

      How reproducible: Always

      Steps to reproduce:
      a) Deploy CLO and LO
      b) Forward logs to Loki
      c) Check ingester logs

      Expected result:
      No error while trying to flush chunks. Data should be available on storage bucket/container

      Actual Result:
      certificate verification failure while trying to flush chunks

      Note: No such issue on 5.9.2

            ptsiraki@redhat.com Periklis Tsirakidis
            rhn-support-kbharti Kabir Bharti
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: