[GitHub] [apisix] lxyqwer commented on issue #8314: SSL_set_tlsext_host_name failed. Retrying

[GitBox <gi...@apache.org>]

lxyqwer commented on issue #8314:
URL: https://github.com/apache/apisix/issues/8314#issuecomment-1312415815

   > 
   yes, 
   昨晚我关掉etcd tls后恢复，早上起来试了下又出现这个问题，重启apisix就恢复了,下面是我的values.yaml配置
   global:
     imagePullSecrets: []
   
   apisix:
     enabled: true
   
     enableIPv6: false
   
     enableServerTokens: false
   
     setIDFromPodUID: false
   
     customLuaSharedDicts: []
     luaModuleHook:
       enabled: false
       luaPath: ""
       hookPoint: ""
       configMapRef:
         name: ""
         mounts:
           - key: ""
             path: ""
   
     httpRouter: radixtree_uri
   
     enableCustomizedConfig: false
     customizedConfig: {}
   
     image:
       repository: apache/apisix
       pullPolicy: IfNotPresent
       tag: 2.15.0-alpine
   
     kind: Deployment
     replicaCount: 1
   
     priorityClassName: ""
     podAnnotations: {}
     podSecurityContext: {}
     securityContext: {}
   
     podDisruptionBudget:
       enabled: false
       minAvailable: 90%
       maxUnavailable: 1
   
     resources:
       limits:
         cpu: 100m
         memory: 128Mi
       requests:
         cpu: 100m
         memory: 128Mi
     hostNetwork: false
   
     nodeSelector: {}
     tolerations: []
     affinity: {}
   
     timezone: "Asia/Shanghai"
   
     extraEnvVars: []
   
   nameOverride: ""
   fullnameOverride: ""
   
   serviceAccount:
     create: true
     annotations: {}
     name: ""
   
   rbac:
     create: true
   
   gateway:
     type: NodePort
     externalTrafficPolicy: Cluster
     externalIPs: []
     http:
       enabled: true
       servicePort: 80
       containerPort: 9080
     tls:
       enabled: false
       servicePort: 443
       containerPort: 9443
       existingCASecret: ""
       certCAFilename: ""
       http2:
         enabled: true
       sslProtocols: "TLSv1.2 TLSv1.3"
     stream:
       enabled: false
       only: false
       tcp: []
       udp: []
     ingress:
       enabled: false
       annotations: {}
       hosts:
         - host: apisix.local
           paths: []
       tls: []
   
   admin:
     enabled: true
     type: NodePort
     externalIPs: []
     port: 9180
     servicePort: 9180
     cors: true
     credentials:
       admin: edd1c9f034335f136f87ad84b625c8fa
       viewer: 4054f7cf07e344346cd3f287985e76aa
   
     allow:
       ipList:
         - 0.0.0.0/0
   
   nginx:
     workerRlimitNofile: "20480"
     workerConnections: "10620"
     workerProcesses: auto
     enableCPUAffinity: true
     envs: []
   
   plugins:
     - server-info
     - api-breaker
     - authz-keycloak
     - basic-auth
     - batch-requests
     - consumer-restriction
     - cors
     - echo
     - fault-injection
     - file-logger
     - grpc-transcode
     - hmac-auth
     - http-logger
     - ip-restriction
     - ua-restriction
     - jwt-auth
     - kafka-logger
     - key-auth
     - limit-conn
     - limit-count
     - limit-req
     - node-status
     - openid-connect
     - authz-casbin
     - prometheus
     - proxy-cache
     - proxy-mirror
     - proxy-rewrite
     - redirect
     - referer-restriction
     - request-id
     - request-validation
     - response-rewrite
     - serverless-post-function
     - serverless-pre-function
     - sls-logger
     - syslog
     - tcp-logger
     - udp-logger
     - uri-blocker
     - wolf-rbac
     - zipkin
     - traffic-split
     - gzip
     - real-ip
     - ext-plugin-pre-req
     - ext-plugin-post-req
   stream_plugins:
     - mqtt-proxy
     - ip-restriction
     - limit-conn
   
   pluginAttrs: {}
   
   extPlugin:
     enabled: false
     cmd: ["/path/to/apisix-plugin-runner/runner", "run"]
   
   wasmPlugins:
     enabled: false
     plugins: []
   
   customPlugins:
     enabled: false
     luaPath: "/opts/custom_plugins/?.lua"
     plugins:
       - name: ""
         attrs: {}
         configMap:
           name: ""
           mounts:
             - key: ""
               path: ""
             - key: ""
               path: ""
   
   updateStrategy: {}
   
   extraVolumes: []
   
   extraVolumeMounts: []
   
   extraInitContainers: []
   
   discovery:
     enabled: true
     registry:
       kubernetes:
         namespace_selector:
           not_equal: default
   
         service:
   
   
   
         client:
           token_file: /var/run/secrets/kubernetes.io/serviceaccount/token
   
   logs:
     enableAccessLog: true
     accessLog: "/dev/stdout"
     accessLogFormat: '$remote_addr - $remote_user [$time_local] $http_host \"$request\" $status $body_bytes_sent $request_time \"$http_referer\" \"$http_user_agent\" $upstream_addr $upstream_status $upstream_response_time \"$upstream_scheme://$upstream_host$upstream_uri\"'
     accessLogFormatEscape: default
     errorLog: "/dev/stderr"
     errorLogLevel: "info"
   
   
   dns:
     resolvers:
       - 127.0.0.1
       - 172.20.0.10
       - 114.114.114.114
       - 223.5.5.5
       - 1.1.1.1
       - 8.8.8.8
     validity: 30
     timeout: 5
   
   initContainer:
     image: busybox
     tag: 1.28
   
   autoscaling:
     enabled: false
     minReplicas: 1
     maxReplicas: 100
     targetCPUUtilizationPercentage: 80
     targetMemoryUtilizationPercentage: 80
   
   configurationSnippet:
     main: |
   
     httpStart: |
   
     httpEnd: |
   
     httpSrv: |
   
     httpAdmin: |
   
     stream: |
   
   serviceMonitor:
     enabled: false
     namespace: ""
     name: ""
     interval: 15s
     path: /apisix/prometheus/metrics
     metricPrefix: apisix_
     containerPort: 9091
     labels: {}
     annotations: {}
   
   etcd:
     enabled: false
     host:
       - http://192.168.0.73:2279
       - http://192.168.0.203:2279
       - http://192.168.0.207:2279
     prefix: "/apisix"
     timeout: 30
   
     auth:
       rbac:
         create: true
         user: "root"
         password: "gggggg"
       tls:
         enabled: false
         existingSecret: ""
         certFilename: ""
         certKeyFilename: ""
         verify: false
         sni: ""
   
     service:
       port: 2379
   
     replicaCount: 3
   
   dashboard:
     enabled: true
   
   ingress-controller:
     enabled: false
   
   vault:
     enabled: false
     host: ""
     timeout: 10
     token: ""
     prefix: ""
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org