provider-sql icon indicating copy to clipboard operation
provider-sql copied to clipboard

postgresql providerconfig does not play nice with rds since 0.5.0

Open gchait opened this issue 1 year ago • 1 comments

i was typing the entire template nicely and then foolishly ctrl+r'ed with hopes of search and replace. needless to say it reloaded the page and i lost everything so please excuse me.

crossplane version: 1.8.1 provider version that didn't work: 0.5.0 provider version that downgrading to fixed the issue: 0.4.1

endpoint is a standard amazon rds url (which i would guess is the most common use-case here anyway) possible duplicate of #94

what didn't work: creating a postgresql providerconfig and a matching postgresql role. it gave errors (in both provider debug mode logs and the events of the role itself) saying this:

"error": "cannot select role: x509: certificate signed by unknown authority", "errorVerbose": "x509: certificate signed by unknown authority\ncannot select role\ngithub.com/crossplane-contrib/provider-sql/pkg/controller/postgresql/role.(*external).Observe\n\t/home/runner/work/provider-sql/provider-sql/pkg/controller/postgresql/role/reconciler.go:241\ngithub.com/crossplane/crossplane-runtime/pkg/reconciler/managed.(*Reconciler).Reconcile\n\t/home/runner/work/provider-sql/provider-sql/.work/pkg/pkg/mod/github.com/crossplane/[email protected]/pkg/reconciler/managed/reconciler.go:577\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/home/runner/work/provider-sql/provider-sql/.work/pkg/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:293\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/home/runner/work/provider-sql/provider-sql/.work/pkg/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:248\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func1.1\n\t/home/runner/work/provider-sql/provider-sql/.work/pkg/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:211\nk8s.io/apimachinery/pkg/util/wait.JitterUntilWithContext.func1\n\t/home/runner/work/provider-sql/provider-sql/.work/pkg/pkg/mod/k8s.io/[email protected]/pkg/util/wait/wait.go:185\nk8s.io/apimachinery/pkg/util/wait.BackoffUntil.func1\n\t/home/runner/work/provider-sql/provider-sql/.work/pkg/pkg/mod/k8s.io/[email protected]/pkg/util/wait/wait.go:155\nk8s.io/apimachinery/pkg/util/wait.BackoffUntil\n\t/home/runner/work/provider-sql/provider-sql/.work/pkg/pkg/mod/k8s.io/[email protected]/pkg/util/wait/wait.go:156\nk8s.io/apimachinery/pkg/util/wait.JitterUntil\n\t/home/runner/work/provider-sql/provider-sql/.work/pkg/pkg/mod/k8s.io/[email protected]/pkg/util/wait/wait.go:133\nk8s.io/apimachinery/pkg/util/wait.JitterUntilWithContext\n\t/home/runner/work/provider-sql/provider-sql/.work/pkg/pkg/mod/k8s.io/[email protected]/pkg/util/wait/wait.go:185\nk8s.io/apimachinery/pkg/util/wait.UntilWithContext\n\t/home/runner/work/provider-sql/provider-sql/.work/pkg/pkg/mod/k8s.io/[email protected]/pkg/util/wait/wait.go:99\nruntime.goexit\n\t/opt/hostedtoolcache/go/1.17.10/x64/src/runtime/asm_amd64.s:1581"}
Events:
  Type     Reason                         Age                 From                                       Message
  ----     ------                         ----                ----                                       -------
  Warning  CannotObserveExternalResource  53m (x99 over 18h)  managed/role.postgresql.sql.crossplane.io  cannot select role: x509: certificate signed by unknown authority
  Warning  CannotObserveExternalResource  14m (x20 over 52m)  managed/role.postgresql.sql.crossplane.io  cannot select role: x509: certificate signed by unknown authority

thanks.

gchait avatar Jul 14 '22 09:07 gchait