nextcloud / nextcloud/helm

Nextcloud on k8s with Redis/Sentinel external cluster

Open
#829 1 comment 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

support
Dominant language
Go Template
Stars
534
Forks
314
Avg merge
42m
Merged PRs (30d)
1

Description

Hello.
Installed 32.0.3 Nexcloud with this chart (https://github.com/nextcloud/helm/blob/main/charts/nextcloud/README.md)

External Redis set:
externalRedis: enabled: true host: "haproxy.valkey.svc" port: "26379"

Corresponding block in config.php:
‘memcache.distributed’ => ‘\OC\Memcache\Redis’, ‘memcache.locking’ => ‘\OC\Memcache\Redis’, ‘redis’ =>array (‘host’ => ‘haproxy.valkey.svc’,‘password’ => ‘XXX’,‘port’ => 26379,)

We're using haproxy in order to connect redis/sentinel hosts with TLS ans password:
`default-server inter 2s rise 2 fall 3 ssl ca-file /etc/haproxy/certs/nc-prod-valkey-ca.pem
listen nc-prod-valkey
bind 0.0.0.0:26379
mode tcp
balance roundrobin

server valkey-01 valkey-01:26379
server valkey-02 valkey-02:26379
server valkey-03 valkey-03:26379`

But after installation we faced with redis issue during authentication Nextcloud login page:
{“method”:“GET”,“url”:“/login?redirect_url=/index.php/core/apps/recommended&direct=1&user=YYY”,“message”:“Could not boot webhook_listeners: ERR AUTH called without any password configured for the default user. Are you sure your configuration is correct?”,,“version”:“32.0.3.2”,,“exception”:{“Exception”:“RedisException”,“Message”:“ERR AUTH called without any password configured for the default user. Are you sure your configuration is correct?”,“Code”:0,“Trace”:[{“file”:"/var/www/html/lib/private}“message”:“session_start(): Redis connection not available at /var/www/html/lib/private/Session/Internal.php#198”Failed to read session data: redis (path: tcp://haproxy.valkey.svc:26379?auth=XXX)

Configs sentinel and redis are required to use TLS and password
TLS port 0 tls-port 6379 tls-cert-file /etc/valkey/ssl/tls.crt tls-key-file /etc/valkey/ssl/tls.key tls-ca-cert-file /etc/valkey/ssl/ca.crt requirepass XXX masterauth XXX sentinel auth-pass mymaster XXXX

Is Nextcloud able to working properly with external Redis/Sentinel cluster?

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start with charts/nextcloud/README.md and the externalRedis configuration shown in the issue, then compare it with the reported config.php and HAProxy TLS/Sentinel setup. Done means establishing whether the chart supports this external Redis/Sentinel arrangement and documenting or correcting the configuration needed for successful login and session storage.

Written by the indexing model from the issue text.

Assessment

Tech stack
helm, kubernetes, redis
Domain
cloud, infrastructure
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Quiet
Clarity
Needs clarification
Newbie friendliness
38/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.