Skip to content

topology failed to declare with rabbitmq Cert #523

@sb185296

Description

@sb185296

Describe the bug

A clear and concise description of what the bug is.

To Reproduce

Steps to reproduce the behavior:

  1. install rabbit operator + messaging latest veration
  2. use AKS
  3. enable cert on RabbitMQ
  4. run that yaml
---
apiVersion: v1
kind: Secret
metadata:
  name: test-user-credentials
type: Opaque
stringData:
  username: "test"
  password: "Qwe12345"
---
apiVersion: rabbitmq.com/v1beta1
kind: User
metadata:
  name: test-user
spec:
  rabbitmqClusterReference:
    name: rabbitcluster
  importCredentialsSecret:
    name: test-user-credentials
---
apiVersion: rabbitmq.com/v1beta1
kind: Permission
metadata:
  name: testuser-permission
spec:
  vhost: "test-vhost"
  user: "test-user" # name corresponds to the username we provided in "test-user-credentials" secret
  permissions:
    write: ".*"
    configure: ""
    read: ".*"
  rabbitmqClusterReference:
    name: rabbitcluster
  1. See error

error from aks :

{"level":"error","ts":1673201299.0511668,"msg":"failed to delete permission","controller":"permission","controllerGroup":"rabbitcluster.com","controllerKind":"Permission","Permission":{"name":"testuser-permission","namespace":"test"},"namespace":"test","name":"testuser-permission","reconcileID":"cf7ba322-99b1-45e9-98bc-efc67c7384e3","error":"Delete \"https://rabbitcluster.svc:15671/api/permissions/test-vhost/test-user\": x509: certificate is valid for qww.canarytokens.com, qww.canarytokens.com, qww.canarytokens.com, api-qww.canarytokens.com, qww.canarytokens.com, qww.canarytokens.com, not rabbitcluster.svc","stacktrace":"github.com/rabbitcluster/messaging-topology-operator/controllers.(*TopologyReconciler).Reconcile\n\t/bitnami/blacksmith-sandox/rmq-messaging-topology-operator-1.10.0/src/github.com/rabbitcluster/rmq-messaging-topology-operator/controllers/topology_controller.go:70\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/bitnami/blacksmith-sandox/rmq-messaging-topology-operator-1.10.0/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:121\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/bitnami/blacksmith-sandox/rmq-messaging-topology-operator-1.10.0/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:320\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/bitnami/blacksmith-sandox/rmq-messaging-topology-operator-1.10.0/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:273\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/bitnami/blacksmith-sandox/rmq-messaging-topology-operator-1.10.0/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:234"}


Screenshots

image

its happened only when we enable TLS
on create or delete :\

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't working

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions