dtomcej / meetup2018 Goto Github PK

Hi,

I tried the steps in the bootstrap.sh script provided to create k8s deployments for boulder, traefik and whoami. I encountered: "Readiness probe failed: Get http://10.200.88.30:4001/directory: dial tcp 10.200.88.30:4001: getsockopt: connection refused" from the boulder pod.

Below are the actions I tool to debug the issue:

I exec into the boulder pod and "curl http://10.200.88.30:4001/directory", got below response:
{
"B0PymtCHU_I": "https://community.letsencrypt.org/t/adding-random-entries-to-the-directory/33417",
"keyChange": "http://10.200.88.30:4001/acme/key-change",
"meta": {
"caaIdentities": [
"happy-hacker-ca.invalid"
],
"termsOfService": "https://boulder:4431/terms/v7",
"website": "https://github.com/letsencrypt/boulder"
},
"newAccount": "http://10.200.88.30:4001/acme/new-acct",
"newNonce": "http://10.200.88.30:4001/acme/new-nonce",
"newOrder": "http://10.200.88.30:4001/acme/new-order",
"revokeCert": "http://10.200.88.30:4001/acme/revoke-cert"
}

then I exec into the boulder-hsm pod and curl the same endpoint, I got the same response.

I wonder if I got readiness probe fail issue because the certificate is invalid.
One thing to mentioned ... when I generate the certs ... I change the passphrase to something else.

Can you please help me with this issue?