foreman_vault icon indicating copy to clipboard operation
foreman_vault copied to clipboard

Connections to vault still in CLOSE_WAIT status

Open Thorsieger opened this issue 1 year ago • 0 comments

foreman version : 3.7.0 foreman_vault version : 1.2.0

Hello, we are using foreman_vault to get secret from our vault. But since we upgrade to foreman version 3.7.0 we have connections to vault that do not close, stack and reach the limit of connections. We then only found that restarting foreman close the connections and allow use to regenerate puppet configuration.

production.log :

2023-09-25T03:41:21 [I|app|5eae260a] Backtrace for 'Failed to generate external nodes for [node]' error (Errno::EADDRNOTAVAIL): Failed to open TCP connection to vault.xxx:443 (Cannot assign requested address - connect(2) for "vault.xxx" port 443)
 5eae260a | /usr/share/ruby/net/http.rb:960:in `initialize'

[root@katello~]# netstat -a | grep "service-internal.:https CLOSE_WAIT" | wc -l
28232

Thorsieger avatar Oct 26 '23 08:10 Thorsieger