g
Hello. I installed Netmaker in OpenShift in Azure. Netmaker server and UI works fine, however on netclient side I'm getting error "unable to connect to broker wss://broker.example.com:443 status can only transition to connecting from disconnected". In this case "broker.example.com" is an Azure Load Balancer with Nginx Ingress behind it. In Mosquitto logs I see only: chown: /mosquitto/config/mosquitto.conf: Read-only file system 1684756537: mosquitto version 2.0.11 starting 1684756537: Config loaded from /mosquitto/config/mosquitto.conf. 1684756537: Loading plugin: /usr/lib/mosquitto_dynamic_security.so 1684756537: Error loading Dynamic security plugin config: File is not readable - check permissions. 1684756537: Opening websockets listen socket on port 8883. 1684756537: Opening websockets listen socket on port 1883. 1684756537: mosquitto version 2.0.11 running 1684756543: New client connected from ::ffff:10.130.0.251:59906 as HOVH2VYUNUPCKNECVZGMAI4 (p2, c1, k60). 1684756543: New client connected from ::ffff:10.128.1.59:40640 as JBPKNEOYDJSGZVAWGS7ECGM (p2, c1, k60). 1684756543: New client connected from ::ffff:10.129.1.245:51492 as 3ZTMKM5VBJKSLYR4XNN4CHO (p2, c1, k60). In the nginx ingress logs I see errors: 2023/05/22 12:36:29 [error] 5634#5634: *187709 upstream prematurely closed connection while reading response header from upstream, client: 104.28.217.207, server: broker.example.com, request: "GET / HTTP/1.1", upstream: "http://10.129.1.248:8883/", host: "broker.example.com:443"
b
There is something wrong with your mosquito.conf. dynamic security is no longer used with mosquitto in netmaker
g
Can you give an example of good mosquitto config?
g
there are no references for MQ username/password in the instruction for K8s: https://github.com/gravitl/netmaker/tree/master/k8s/server
or is the instructions for k8s outdated?