You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@apisix.apache.org by "MirtoBusico (via GitHub)" <gi...@apache.org> on 2023/05/26 14:38:47 UTC

[GitHub] [apisix-dashboard] MirtoBusico opened a new issue, #2814: A new SNI created in dashboard needs an apisix pod restart to be seen

MirtoBusico opened a new issue, #2814:
URL: https://github.com/apache/apisix-dashboard/issues/2814

   ### Issue description
   
   With Apisix 3.3.0 and Apisix-dashboard 3.0.0 when I create a new SNI and try to access the associated route I receive an error "failed to find any SSL certificate by SNI".
   Then I restart the Apisix pod and the route works correctly.
   
   Note: Apisix is installed on k3s cluster (1 master and 3 workers) alongside Istio 1.17.2
   
   ### Expected behavior
   
   I expect to create a SNI and a route and use it without any other operation
   
   ### How to Reproduce
   
   1. create an upstream, a route and a sni (here for the "https://k8s.h.net" host)
   2. try to access the "https://k8s.h.net" url and receive an error message
   3. look at the Apisix pod logs and see
   ```
   2023/05/26 14:11:18 [error] 49#49: *4142667 [lua] radixtree_sni.lua:176: match_and_set(): failed to find any SSL certificate by SNI: k8s.h.net, context: ssl_certificate_by_lua*, client: 127.0.0.6, server: 0.0.0.0:9443
   2023/05/26 14:11:18 [error] 53#53: *4142669 [lua] radixtree_sni.lua:176: match_and_set(): failed to find any SSL certificate by SNI: k8s.h.net, context: ssl_certificate_by_lua*, client: 127.0.0.6, server: 0.0.0.0:9443
   2023/05/26 14:11:18 [error] 50#50: *4142673 [lua] radixtree_sni.lua:176: match_and_set(): failed to find any SSL certificate by SNI: k8s.h.net, context: ssl_certificate_by_lua*, client: 127.0.0.6, server: 0.0.0.0:9443
   ```
   (one error for any worker node)
   
   4. restart the Apisix deploment
   5. access the "https://k8s.h.net" url and verify it works correctly
   6. look at the Apisix pod log and see:
   ```
   127.0.0.6 - - [26/May/2023:14:20:09 +0000] k8s.h.net "GET / HTTP/1.0" 200 821 0.010 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0" 10.43.216.96:443 200 0.009 "https://k8s.h.net"
   127.0.0.6 - - [26/May/2023:14:20:10 +0000] k8s.h.net "GET /styles.243e6d874431c8e8.css HTTP/1.0" 200 28555 0.008 "https://k8s.h.net/" "Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0" 10.43.216.96:443 200 0.008 "https://k8s.h.net"
   127.0.0.6 - - [26/May/2023:14:20:10 +0000] k8s.h.net "GET /runtime.134ad7745384bed8.js HTTP/1.0" 200 2225 0.004 "https://k8s.h.net/" "Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0" 10.43.216.96:443 200 0.003 "https://k8s.h.net"
   127.0.0.6 - - [26/May/2023:14:20:10 +0000] k8s.h.net "GET /config HTTP/1.0" 200 28 0.001 "https://k8s.h.net/" "Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0" 10.43.216.96:443 200 0.001 "https://k8s.h.net"
   ```
   
   
   ### Screenshots
   
   _No response_
   
   ### Environment
   
   - APISIX version (run `apisix version`): 3.3.0
   - Operating system (run `uname -a`):  `Linux apisix-694d5589cc-l2948 5.10.0-23-amd64 #1 SMP Debian 5.10.179-1 (2023-05-12) x86_64 GNU/Linux`
   - OpenResty / Nginx version (run `openresty -V` or `nginx -V`):
   - etcd version, if relevant (run `curl http://127.0.0.1:9090/v1/server_info`):
   - APISIX Dashboard version, if relevant: 3.0.0
   - Plugin runner version, for issues related to plugin runners:
   - LuaRocks version, for installation issues (run `luarocks --version`):
   
   
   ### Additional context
   
   _No response_


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [I] A new SNI created in dashboard needs an apisix pod restart to be seen [apisix-dashboard]

Posted by "juzhiyuan (via GitHub)" <gi...@apache.org>.
juzhiyuan closed issue #2814: A new SNI created in dashboard needs an apisix pod restart to be seen
URL: https://github.com/apache/apisix-dashboard/issues/2814


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [I] A new SNI created in dashboard needs an apisix pod restart to be seen [apisix-dashboard]

Posted by "juzhiyuan (via GitHub)" <gi...@apache.org>.
juzhiyuan commented on issue #2814:
URL: https://github.com/apache/apisix-dashboard/issues/2814#issuecomment-2814345667

   Hi, we will release a new dashboard to address legacy issues. Refer to https://github.com/apache/apisix-dashboard/issues/2981


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org