Comments (2)
Just for reference, without this change, the UAA has a stacktrace in its log.
Caused by: org.postgresql.util.PSQLException: The server does not support SSL.
at org.postgresql.core.v3.ConnectionFactoryImpl.enableSSL(ConnectionFactoryImpl.java:431) ~[postgresql-42.2.8.jar:42.2.8]
at org.postgresql.core.v3.ConnectionFactoryImpl.tryConnect(ConnectionFactoryImpl.java:94) ~[postgresql-42.2.8.jar:42.2.8]
at org.postgresql.core.v3.ConnectionFactoryImpl.openConnectionImpl(ConnectionFactoryImpl.java:192) ~[postgresql-42.2.8.jar:42.2.8]
at org.postgresql.core.ConnectionFactory.openConnection(ConnectionFactory.java:49) ~[postgresql-42.2.8.jar:42.2.8]
at org.postgresql.jdbc.PgConnection.<init>(PgConnection.java:195) ~[postgresql-42.2.8.jar:42.2.8]
at org.postgresql.Driver.makeConnection(Driver.java:458) ~[postgresql-42.2.8.jar:42.2.8]
at org.postgresql.Driver.connect(Driver.java:260) ~[postgresql-42.2.8.jar:42.2.8]
at org.apache.tomcat.jdbc.pool.PooledConnection.connectUsingDriver(PooledConnection.java:319) ~[tomcat-jdbc-9.0.27.jar:?]
at org.apache.tomcat.jdbc.pool.PooledConnection.connect(PooledConnection.java:212) ~[tomcat-jdbc-9.0.27.jar:?]
at org.apache.tomcat.jdbc.pool.ConnectionPool.createConnection(ConnectionPool.java:744) ~[tomcat-jdbc-9.0.27.jar:?]
at org.apache.tomcat.jdbc.pool.ConnectionPool.borrowConnection(ConnectionPool.java:676) ~[tomcat-jdbc-9.0.27.jar:?]
at org.apache.tomcat.jdbc.pool.ConnectionPool.init(ConnectionPool.java:483) ~[tomcat-jdbc-9.0.27.jar:?]
at org.apache.tomcat.jdbc.pool.ConnectionPool.<init>(ConnectionPool.java:154) ~[tomcat-jdbc-9.0.27.jar:?]
at org.apache.tomcat.jdbc.pool.DataSourceProxy.pCreatePool(DataSourceProxy.java:118) ~[tomcat-jdbc-9.0.27.jar:?]
at org.apache.tomcat.jdbc.pool.DataSourceProxy.createPool(DataSourceProxy.java:107) ~[tomcat-jdbc-9.0.27.jar:?]
at org.apache.tomcat.jdbc.pool.DataSourceProxy.getConnection(DataSourceProxy.java:131) ~[tomcat-jdbc-9.0.27.jar:?]
at org.flywaydb.core.internal.jdbc.JdbcUtils.openConnection(JdbcUtils.java:56) ~[flyway-core-5.2.4.jar:?]
at org.flywaydb.core.internal.database.DatabaseFactory.createDatabase(DatabaseFactory.java:72) ~[flyway-core-5.2.4.jar:?]
at org.flywaydb.core.Flyway.execute(Flyway.java:1670) ~[flyway-core-5.2.4.jar:?]
at org.flywaydb.core.Flyway.repair(Flyway.java:1566) ~[flyway-core-5.2.4.jar:?]
at org.cloudfoundry.identity.uaa.db.beans.FlywayConfiguration.flyway(FlywayConfiguration.java:43) ~[cloudfoundry-identity-server-74.9.0.jar:?]
at org.cloudfoundry.identity.uaa.db.beans.FlywayConfiguration$$EnhancerBySpringCGLIB$$f525c96e.CGLIB$flyway$0(<generated>) ~[cloudfoundry-identity-s
erver-74.9.0.jar:?]
at org.cloudfoundry.identity.uaa.db.beans.FlywayConfiguration$$EnhancerBySpringCGLIB$$f525c96e$$FastClassBySpringCGLIB$$776d01f8.invoke(<generated>)
~[cloudfoundry-identity-server-74.9.0.jar:?]
at org.springframework.cglib.proxy.MethodProxy.invokeSuper(MethodProxy.java:244) ~[spring-core-5.2.1.RELEASE.jar:5.2.1.RELEASE]
at org.springframework.context.annotation.ConfigurationClassEnhancer$BeanMethodInterceptor.intercept(ConfigurationClassEnhancer.java:363) ~[spring-c
ontext-5.2.1.RELEASE.jar:5.2.1.RELEASE]
from concourse-bosh-deployment.
It looks like bosh DNS will have to be used for this to work.
Some bosh directors (like OpsMan) that is already installed as a runtime config.
If we assume that is the director being used, we could have a ops-file that ensures the DNS alias for postgres is available.
from concourse-bosh-deployment.
Related Issues (20)
- versions file assumes access to bosh.io, provide an operations file that _forces_ offline mode
- uaa requires larger canary watch
- documented uaa and credhub versions as vars files
- make AZs a variables, rather than hard code it, it is never `z1` HOT 1
- AZs need to be parameterized in all Ops files
- v6.1.0 - tagged incorrectly in this repo - Concourse unable to track HOT 2
- basic-auth.yml ops file has a misleading name
- Oauth2: cannot fetch token: 404.. Response: 404 page not found; Concourse 5.5.11 to 6.3.0 upgrade HOT 1
- credhub and uaa dbs are not backed up when colocated on web HOT 2
- BBR backup CredHub fails due to hostname verification failure with internal postgres server's certificate HOT 2
- bionic stemcell HOT 8
- mTLS unintentionally(?) enabled when deploying v7.0.0+ HOT 3
- concourse 7.3.1 upgrade failure HOT 4
- BBR 1.15.0 deployment fails, but 1.18.9 succeeds
- uaa job fails to start when using ssl mode on self signed certs
- The v7.4.4 versions.yml references v.7.4.0. HOT 4
- Empty versions.yml for 7.9.0 concourse release HOT 5
- Are there plans to update the stemcell to Jammy Jellyfish? HOT 2
- Web instance is not running after update. (pthread_create failed) HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from concourse-bosh-deployment.