Hello Ricky, I see that you're trying to run etcd in SSL mode, but I do not see a consul server instance in your instance list. Are you deploying a consul server job? - Adrian

Hi Ricky, Thanks for the clarification, if you can give us the logs for all three etcd instances, we can help debug exactly whats going on. You can retrieve the logs from the etcd instances by running

Hi Ricky, We deconstructed the certs you provided in your manifest and think that you may have missed a step when you generated your peer ssl cert. Your peer cert is missing the DNS wildcard entry '*.

Hi Michael, Are you still experiencing upgrade issues? Are you deploying multiple instances of the hm9000, loggregator_trafficcontroller and doppler jobs? - Adrian

Hi Michael, Have you tried Rich's suggestion: https://lists.cloudfoundry.org/archives/list/cf-dev(a)lists.cloudfoundry.org/message/MPUKXCBNG7H642ITVYKRMQ5ZQ6YLJKDU/ - Adrian