Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Cannot connect to redis using ssl because there is no option to pass ca cert #387

Closed
SarjakShirishShah opened this issue May 25, 2020 · 1 comment · Fixed by #393
Closed

Cannot connect to redis using ssl because there is no option to pass ca cert #387

SarjakShirishShah opened this issue May 25, 2020 · 1 comment · Fixed by #393
Assignees
@oliver006
Labels
help wanted question

Comments

@SarjakShirishShah
Copy link

Describe the problem
Cannot connect to redis using ssl because there is no option to pass ca cert

What version of redis_exporter are you running?
Redis Metrics Exporter v0.31.0

Running the exporter
What's the full command you're using to run the exporter? (please remove passwords and other sensitive data)
Provided these environment variables in helm chart
REDIS_ADDR = rediss://localhost:6385
REDIS_PASSWORD =
REDIS_EXPORTER_TLS_CLIENT_KEY_FILE = /path/to/client.key
REDIS_EXPORTER_TLS_CLIENT_CERT_FILE = /path/to/client.cert

Additional context
I think redis needs CA cert as well, and I don't see a paramter to pass that in redis-exporter

Logs on redis, when redis-exporter tries to connect:
May 2020 22:39:56.416 # Error accepting a client connection: error:14094412:SSL routines:ssl3_read_bytes:sslv3 alert bad certificate
@oliver006
Copy link
Owner

Hey there. I can't find the discussion in a past issue/PR but I think this is a known issue and could use some help by someone that want's to submit a PR.

Implementation should be very similar to #264

This was referenced Jun 4, 2020
Merged
Merged
@SarjakSShah SarjakSShah mentioned this issue Jun 16, 2020
Merged
noderat added a commit to noderat/charts that referenced this issue Oct 30, 2020
@noderat
Set metrics exporter CA certificate env variable
e96b5dd 
Add the REDIS_EXPORTER_TLS_CA_CERT_FILE environment variable to the prometheus exporter
oliver006/redis_exporter#387 has been resolved
@noderat noderat mentioned this issue Oct 30, 2020
Merged
2 tasks
noderat added a commit to noderat/charts that referenced this issue Nov 2, 2020
@noderat
Set metrics exporter CA certificate env variable
00551fb 
Add the REDIS_EXPORTER_TLS_CA_CERT_FILE environment variable to the prometheus exporter
oliver006/redis_exporter#387 has been resolved
FraPazGal pushed a commit to bitnami/charts that referenced this issue Nov 2, 2020
@noderat
[bitnami/redis*] Set metrics exporter CA certificate env variable (#4169
5127668 
)

* Set metrics exporter CA certificate env variable

Add the REDIS_EXPORTER_TLS_CA_CERT_FILE environment variable to the prometheus exporter
oliver006/redis_exporter#387 has been resolved

* Bump redis chart version to 11.3.0

* Set metrics exporter CA certificate env variable

Add the REDIS_EXPORTER_TLS_CA_CERT_FILE environment variable to the prometheus exporter
oliver006/redis_exporter#387 has been resolved

* Bump redis-cluster chart version to 3.3.0
@drmy drmy mentioned this issue Dec 3, 2020
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@oliver006 oliver006

Labels
help wanted question
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Pass RootCAs to dialTLSConfig SarjakSShah/redis_exporter
2 participants
@oliver006 @SarjakShirishShah