hashicorp / hashicorp/consul

TLS handshake failure

Open
#9,178 2 comments 0 reactions 0 assignees View on GitHub
theme/kubernetes type/question
Dominant language
Go
Stars
30.1k
Forks
4.6k
Avg merge
2d 6h
Merged PRs (30d)
43

Description

Hello, I've been unable to resolve TLS related errors, these are the errors:

```
[ERROR] agent.server.memberlist.wan: memberlist: failed to receive: Encryption is configured but remote state is not encrypted
[ERROR] agent.auto_config: No servers successfully responded to the auto-encrypt request
[ERROR] agent.server.rpc: TLS handshake failed: conn=from=13.42.67.159:44830 error="tls: client didn't provide a certificate"
```

Here is my config.yaml, any insights is greatly appreciated:
```
global:
enabled: true
name: consul
datacenter: dc1
image: 'consul:1.8.4'

gossipEncryption:
secretName: "consul-gossip-encryption-key"
secretKey: "key"

tls:
enabled: true
enableAutoEncrypt: true
httpsOnly: true
serverAdditionalDNSSANs: ["'consul.service.consul'"]
verify: true

server:
replicas: 3
bootstrapExpect: 3
storage: 10Gi
connect: true
serverAdditionalDNSSANs: ["'consul.service.consul'"]

terminatingGateways:
enabled: true
defaults:
replicas: 1

sidecarProxy:
resources:
requests:
memory: 100Mi
cpu: 100m
limits:
memory: 100mi
cpu: 100m

connectInject:
enabled: true
default: false

services:
backend: backend.service.consul

ui:
enabled: true
service:
type: 'NodePort'

syncCatalog:
enabled: true
default: true
toConsul: true
toK8s: true
```

```
global:
enabled: true
name: consul
datacenter: dc1
image: 'consul:1.8.4'

gossipEncryption:
secretName: "consul-gossip-encryption-key"
secretKey: "key"

tls:
enabled: true
enableAutoEncrypt: true
httpsOnly: true
serverAdditionalDNSSANs: ["'consul.service.consul'"]
verify: true

server:
replicas: 3
bootstrapExpect: 3
storage: 10Gi
connect: true
serverAdditionalDNSSANs: ["'consul.service.consul'"]

terminatingGateways:
enabled: true
defaults:
replicas: 1

sidecarProxy:
resources:
requests:
memory: 100Mi
cpu: 100m
limits:
memory: 100mi
cpu: 100m

connectInject:
enabled: true
default: false

services:
backend: backend.service.consul

ui:
enabled: true
service:
type: 'NodePort'

syncCatalog:
enabled: true
default: true
toConsul: true
toK8s: true

client:
enabled: true
grpc: true
extraVolumes:
- type: 'secret'
name: 'consul-gossip-encryption-key'
load: false
affinity: null
resources:
requests:
memory: '25Mi'
cpu: '20m'
limits:
memory: '50Mi'
cpu: '20m'
```

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.