oncall icon indicating copy to clipboard operation
oncall copied to clipboard

Problem with Grafana interaction when using self-signed certificates

Open pawellrus opened this issue 1 year ago • 1 comments

What went wrong?

What happened: I have self-signed certificates on both http endpoints: grafana and oncall I am trying to integrate them but got SSL errors in engine and celery containers. I tried to mount root certificates into /etc/ssl/certs folder but it didn't help It's possible that running "update-ca-certificates" could help, but helm chart does not have options to define startup command either initContaner.

Is there any another options to make setup with self-signed certs working?

How do we reproduce it?

Self signed certificates on grafana side and oncall side.

Grafana OnCall Version

v1.3.90

Product Area

Other

Grafana OnCall Platform?

Kubernetes

User's Browser?

No response

Anything else to add?

No response

pawellrus avatar Jan 23 '24 11:01 pawellrus

If you use docker-compose, delete the persistent data first, docker volume rm oncall_redis_data docker volume rm oncall_oncall_data

Then add REQUESTS_CA_BUNDLE: "/path/xxx.crt" environment variable to docker-compose.yml x-environment

Mount the certificate volumes path to the container

k8s can also add environment variables and mount certificates to pods

rookie-man-fack avatar Jan 30 '24 17:01 rookie-man-fack