Re: Announcement: default etcd cluster to TLS in cf-release spiff templates
|
Grifalconi, Michael <michael.grifalconi@...>
Hello,
toggle quoted message
Show quoted text
Sorry for the long delay but I had to wait to test your suggestion.. and it worked! We still had some issue that needed a restart of some VMs but nothing compared the issue we faced before. I strongly suggest to include this step in the update guide you provided. Thanks Regards, Michael On 27/09/16 15:22, "Rich Wohlstadter" <lethwin(a)gmail.com> wrote:
Hi Michael, We were hitting the same issue. It turned out to be that that the etcd_proxy (temporarily on etcd_z2) was advertising dns for cf-etcd.service.cf.internal which caused some of the below services to try and contact the proxy securely which would fail. What we did is added a step after you generate the manifest and get ready to deploy the upgrade to v241, edit and delete the following consul property on your etcd_z2 job before deploying: consul: agent: services: etcd: name: cf-etcd That solved the issue. Once everything is talking to the secure etcd standalone and you scale back up the generation scripts will add it back in and your good to go. Hope this helps. -Rich |
|
|