-- Connectivity between curator and elasticsearch with ca Starting pod/curator-debug ... * Rebuilt URL to: https://elasticsearch:9200/ * Trying 172.30.122.114... * TCP_NODELAY set * Connected to elasticsearch (172.30.122.114) port 9200 (#0) * ALPN, offering h2 * ALPN, offering http/1.1 * successfully set certificate verify locations: * CAfile: /etc/curator/keys/ca CApath: none } [5 bytes data] * TLSv1.3 (OUT), TLS handshake, Client hello (1): } [512 bytes data] * TLSv1.3 (IN), TLS handshake, Server hello (2): { [70 bytes data] * TLSv1.2 (IN), TLS handshake, Certificate (11): { [1572 bytes data] * TLSv1.2 (IN), TLS handshake, Server key exchange (12): { [556 bytes data] * TLSv1.2 (IN), TLS handshake, Request CERT (13): { [82 bytes data] * TLSv1.2 (IN), TLS handshake, Server finished (14): { [4 bytes data] * TLSv1.2 (OUT), TLS handshake, Certificate (11): } [2741 bytes data] * TLSv1.2 (OUT), TLS handshake, Client key exchange (16): } [37 bytes data] * TLSv1.2 (OUT), TLS handshake, CERT verify (15): } [520 bytes data] * TLSv1.2 (OUT), TLS change cipher, Change cipher spec (1): } [1 bytes data] * TLSv1.2 (OUT), TLS handshake, Finished (20): } [16 bytes data] * TLSv1.2 (IN), TLS handshake, Finished (20): { [16 bytes data] * SSL connection using TLSv1.2 / ECDHE-RSA-AES128-GCM-SHA256 * ALPN, server accepted to use http/1.1 * Server certificate: * subject: O=Logging; OU=OpenShift; CN=logging-es * start date: Mar 3 11:21:00 2021 GMT * expire date: Mar 3 11:21:00 2023 GMT * subjectAltName: host "elasticsearch" matched cert's "elasticsearch" * issuer: CN=openshift-cluster-logging-signer * SSL certificate verify ok. } [5 bytes data] > GET / HTTP/1.1 > Host: elasticsearch:9200 > User-Agent: curl/7.61.1 > Accept: */* > { [5 bytes data] < HTTP/1.1 200 OK < Content-Length: 489 < Content-Type: application/json; charset=UTF-8 < Gap-Upstream-Address: localhost:9200 < Date: Wed, 24 Mar 2021 11:21:45 GMT < * Excess found in a non pipelined read: excess = 489 url = / (zero-length body) * Connection #0 to host elasticsearch left intact HTTP/1.1 200 OK Content-Length: 489 Content-Type: application/json; charset=UTF-8 Gap-Upstream-Address: localhost:9200 Date: Wed, 24 Mar 2021 11:21:45 GMT Removing debug pod ... without ca Starting pod/curator-debug ... * Rebuilt URL to: https://elasticsearch:9200/ * Trying 172.30.122.114... * TCP_NODELAY set * Connected to elasticsearch (172.30.122.114) port 9200 (#0) * ALPN, offering h2 * ALPN, offering http/1.1 * successfully set certificate verify locations: * CAfile: /etc/pki/tls/certs/ca-bundle.crt CApath: none } [5 bytes data] * TLSv1.3 (OUT), TLS handshake, Client hello (1): } [512 bytes data] * TLSv1.3 (IN), TLS handshake, Server hello (2): { [70 bytes data] * TLSv1.2 (IN), TLS handshake, Certificate (11): { [1572 bytes data] * TLSv1.2 (IN), TLS handshake, Server key exchange (12): { [556 bytes data] * TLSv1.2 (IN), TLS handshake, Request CERT (13): { [82 bytes data] * TLSv1.2 (IN), TLS handshake, Server finished (14): { [4 bytes data] * TLSv1.2 (OUT), TLS handshake, Certificate (11): } [1399 bytes data] * TLSv1.2 (OUT), TLS handshake, Client key exchange (16): } [37 bytes data] * TLSv1.2 (OUT), TLS handshake, CERT verify (15): } [520 bytes data] * TLSv1.2 (OUT), TLS change cipher, Change cipher spec (1): } [1 bytes data] * TLSv1.2 (OUT), TLS handshake, Finished (20): } [16 bytes data] * TLSv1.2 (IN), TLS handshake, Finished (20): { [16 bytes data] * SSL connection using TLSv1.2 / ECDHE-RSA-AES128-GCM-SHA256 * ALPN, server accepted to use http/1.1 * Server certificate: * subject: O=Logging; OU=OpenShift; CN=logging-es * start date: Mar 3 11:21:00 2021 GMT * expire date: Mar 3 11:21:00 2023 GMT * issuer: CN=openshift-cluster-logging-signer * SSL certificate verify result: unable to get local issuer certificate (20), continuing anyway. } [5 bytes data] > GET / HTTP/1.1 > Host: elasticsearch:9200 > User-Agent: curl/7.61.1 > Accept: */* > { [5 bytes data] < HTTP/1.1 200 OK < Content-Length: 489 < Content-Type: application/json; charset=UTF-8 < Gap-Upstream-Address: localhost:9200 < Date: Wed, 24 Mar 2021 11:21:49 GMT < * Excess found in a non pipelined read: excess = 489 url = / (zero-length body) * Connection #0 to host elasticsearch left intact HTTP/1.1 200 OK Content-Length: 489 Content-Type: application/json; charset=UTF-8 Gap-Upstream-Address: localhost:9200 Date: Wed, 24 Mar 2021 11:21:49 GMT Removing debug pod ...