kestra
kestra copied to clipboard
Quick Start Installation with Certificate Issue
Feature description
I just started following the Docs and started Quick Start using the command : docker run --pull=always --rm -it -p 8181:8181 --user=root -v /var/run/docker.sock:/var/run/docker.sock -v /tmp:/tmp kestra/kestra:latest server local, changed port to 8181 as already 8080 is bind with other app, However i am getting an error latest: Pulling from kestra/kestra 4be1db8bbbeb: Pull complete 8cc429601029: Pull complete 5bb97d9b04cd: Pull complete 44efd14ea121: Pull complete e7a975d7275d: Pull complete 7e3508809d5a: Pull complete ba9189ac610d: Pull complete 7bef88828e83: Pull complete 198b4044968d: Pull complete Digest: sha256:13341fc76357f4167135604b69b4755855c9f240248a2965c724d4da9a3c5762 Status: Downloaded newer image for kestra/kestra:latest 2024-10-14 08:27:53,424 INFO main org.flywaydb.core.FlywayExecutor Database: jdbc:h2:file:/app/data/database (H2 2.3) 2024-10-14 08:27:53,431 WARN main o.f.c.i.database.base.Database Flyway upgrade recommended: H2 2.3.232 is newer than this version of Flyway and support has not been tested. The latest supported version of H2 is 2.2.224. 2024-10-14 08:27:53,461 INFO main o.f.c.i.s.JdbcTableSchemaHistory Schema history table "PUBLIC"."flyway_schema_history" does not exist yet 2024-10-14 08:27:53,464 INFO main o.f.core.internal.command.DbValidate Successfully validated 19 migrations (execution time 00:00.015s) 2024-10-14 08:27:53,472 INFO main o.f.c.i.s.JdbcTableSchemaHistory Creating Schema History table "PUBLIC"."flyway_schema_history" ... 2024-10-14 08:27:53,503 INFO main o.f.core.internal.command.DbMigrate Current version of schema "PUBLIC": << Empty Schema >> 2024-10-14 08:27:53,527 INFO main o.f.core.internal.command.DbMigrate Migrating schema "PUBLIC" to version "1.1 - initial" 2024-10-14 08:27:53,673 INFO main o.f.core.internal.command.DbMigrate Migrating schema "PUBLIC" to version "1.2 - worker heartbeat" 2024-10-14 08:27:53,679 INFO main o.f.core.internal.command.DbMigrate Migrating schema "PUBLIC" to version "1.3 - worker heartbeat" 2024-10-14 08:27:53,686 INFO main o.f.core.internal.command.DbMigrate Migrating schema "PUBLIC" to version "1.4 - multitenant" 2024-10-14 08:27:53,725 INFO main o.f.core.internal.command.DbMigrate Migrating schema "PUBLIC" to version "1.5 - multitenant on multipleconditions" 2024-10-14 08:27:53,732 INFO main o.f.core.internal.command.DbMigrate Migrating schema "PUBLIC" to version "1.6 - execution queued" 2024-10-14 08:27:53,737 INFO main o.f.core.internal.command.DbMigrate Migrating schema "PUBLIC" to version "1.7 - execution cancelled" 2024-10-14 08:27:53,744 INFO main o.f.core.internal.command.DbMigrate Migrating schema "PUBLIC" to version "1.8 - execution queued" 2024-10-14 08:27:53,751 INFO main o.f.core.internal.command.DbMigrate Migrating schema "PUBLIC" to version "1.9 - multitenant indices" 2024-10-14 08:27:53,761 INFO main o.f.core.internal.command.DbMigrate Migrating schema "PUBLIC" to version "1.12 - execution triggerid" 2024-10-14 08:27:53,769 INFO main o.f.core.internal.command.DbMigrate Migrating schema "PUBLIC" to version "1.13 - log fulltext" 2024-10-14 08:27:53,775 INFO main o.f.core.internal.command.DbMigrate Migrating schema "PUBLIC" to version "1.14 - subflow executions" 2024-10-14 08:27:53,782 INFO main o.f.core.internal.command.DbMigrate Migrating schema "PUBLIC" to version "1.15 - trigger store next date" 2024-10-14 08:27:53,787 INFO main o.f.core.internal.command.DbMigrate Migrating schema "PUBLIC" to version "1.16 - log timestamp index" 2024-10-14 08:27:53,793 INFO main o.f.core.internal.command.DbMigrate Migrating schema "PUBLIC" to version "1.17 - service instance" 2024-10-14 08:27:53,798 INFO main o.f.core.internal.command.DbMigrate Migrating schema "PUBLIC" to version "1.18 - retry revamp" 2024-10-14 08:27:53,805 INFO main o.f.core.internal.command.DbMigrate Migrating schema "PUBLIC" to version "1.19 - retry flow" 2024-10-14 08:27:53,809 INFO main o.f.core.internal.command.DbMigrate Migrating schema "PUBLIC" to version "1.20 - drop worker instance" 2024-10-14 08:27:53,813 INFO main o.f.core.internal.command.DbMigrate Migrating schema "PUBLIC" to version "1.21 - trigger worker id" 2024-10-14 08:27:53,820 INFO main o.f.core.internal.command.DbMigrate Successfully applied 19 migrations to schema "PUBLIC", now at version v1.21 (execution time 00:00.222s) 2024-10-14 08:27:54,999 INFO local io.kestra.cli.AbstractCommand Starting Kestra 0.19.2 with environments [cli] [revision 4338437 / 2024-10-08T13:52] 2024-10-14 08:27:55,096 INFO local i.kestra.core.plugins.PluginScanner Registered 79 core plugins (scan done in 89ms) 2024-10-14 08:27:55,678 INFO local i.kestra.core.plugins.PluginScanner Registered 486 plugins from 97 groups (scan done in 578ms) 2024-10-14 08:27:56,210 INFO local io.kestra.cli.AbstractCommand Server Running: http://1e81e7545597:8080/, Management server on port http://1e81e7545597:47615/health 2024-10-14 08:27:56,979 WARN local i.k.w.services.FlowAutoLoaderService Unable to load "Getting Started" flows from community blueprints. You can disable this feature by setting 'kestra.tutorial-flows.enabled=false'. Cause: Client 'api': Connect Error: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target 2024-10-14 08:27:57,040 ERROR default-nioEventLoopGroup-1-4 i.m.h.client.netty.DefaultHttpClient Failed to connect to remote javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target at java.base/sun.security.ssl.Alert.createSSLException(Unknown Source) at java.base/sun.security.ssl.TransportContext.fatal(Unknown Source) at java.base/sun.security.ssl.TransportContext.fatal(Unknown Source) at java.base/sun.security.ssl.TransportContext.fatal(Unknown Source) at java.base/sun.security.ssl.CertificateMessage$T13CertificateConsumer.checkServerCerts(Unknown Source) at java.base/sun.security.ssl.CertificateMessage$T13CertificateConsumer.onConsumeCertificate(Unknown Source) at java.base/sun.security.ssl.CertificateMessage$T13CertificateConsumer.consume(Unknown Source) at java.base/sun.security.ssl.SSLHandshake.consume(Unknown Source) at java.base/sun.security.ssl.HandshakeContext.dispatch(Unknown Source) at java.base/sun.security.ssl.SSLEngineImpl$DelegatedTask$DelegatedAction.run(Unknown Source) at java.base/sun.security.ssl.SSLEngineImpl$DelegatedTask$DelegatedAction.run(Unknown Source) at java.base/java.security.AccessController.doPrivileged(Unknown Source) at java.base/sun.security.ssl.SSLEngineImpl$DelegatedTask.run(Unknown Source) at io.netty.handler.ssl.SslHandler.runDelegatedTasks(SslHandler.java:1671) at io.netty.handler.ssl.SslHandler.unwrap(SslHandler.java:1517) at io.netty.handler.ssl.SslHandler.decodeJdkCompatible(SslHandler.java:1358) at io.netty.handler.ssl.SslHandler.decode(SslHandler.java:1407) at io.netty.handler.codec.ByteToMessageDecoder.decodeRemovalReentryProtection(ByteToMessageDecoder.java:530) at io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:469) at io.netty.handler.codec.ByteToMessageDecoder.channelRead(ByteToMessageDecoder.java:290) at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:444) at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:420) at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:412) at io.netty.channel.DefaultChannelPipeline$HeadContext.channelRead(DefaultChannelPipeline.java:1357) at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:440) at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:420) at io.netty.channel.DefaultChannelPipeline.fireChannelRead(DefaultChannelPipeline.java:868) at io.netty.channel.nio.AbstractNioByteChannel$NioByteUnsafe.read(AbstractNioByteChannel.java:166) at io.netty.channel.nio.NioEventLoop.processSelectedKey(NioEventLoop.java:788) at io.netty.channel.nio.NioEventLoop.processSelectedKeysOptimized(NioEventLoop.java:724) at io.netty.channel.nio.NioEventLoop.processSelectedKeys(NioEventLoop.java:650) at io.netty.channel.nio.NioEventLoop.run(NioEventLoop.java:562) at io.netty.util.concurrent.SingleThreadEventExecutor$4.run(SingleThreadEventExecutor.java:997) at io.netty.util.internal.ThreadExecutorMap$2.run(ThreadExecutorMap.java:74) at io.netty.util.concurrent.FastThreadLocalRunnable.run(FastThreadLocalRunnable.java:30) at java.base/java.lang.Thread.run(Unknown Source) Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target at java.base/sun.security.validator.PKIXValidator.doBuild(Unknown Source) at java.base/sun.security.validator.PKIXValidator.engineValidate(Unknown Source) at java.base/sun.security.validator.Validator.validate(Unknown Source) at java.base/sun.security.ssl.X509TrustManagerImpl.checkTrusted(Unknown Source) at java.base/sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(Unknown Source) ... 32 common frames omitted Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target at java.base/sun.security.provider.certpath.SunCertPathBuilder.build(Unknown Source) at java.base/sun.security.provider.certpath.SunCertPathBuilder.engineBuild(Unknown Source) at java.base/java.security.cert.CertPathBuilder.build(Unknown Source) ... 37 common frames omitted