Error when export course and suggested ingress setting

Hi,

I have met an error when exporting the course.
the log in cms-worker is as below

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/openedx/venv/lib/python3.8/site-packages/botocore/vendored/requests/adapters.py", line 360, in send
    resp = conn.urlopen(
  File "/openedx/venv/lib/python3.8/site-packages/botocore/vendored/requests/packages/urllib3/connectionpool.py", line 574, in urlopen
    raise SSLError(e)
botocore.vendored.requests.packages.urllib3.exceptions.SSLError: ("hostname 'files.openedx.xxx.aaa.bbb' doesn't match either of 'xxx.aaa.bbb', '*.xxx.aaa.bbb'",)

I am not sure where going wrong. Could you help me a little bit?

I deployed the openedx by tutor in a k8s cluster with an ingress.
My config is

ENABLE_HTTPS: true
ENABLE_WEB_PROXY: false

and my ingress is similar like this

spec:
  rules:
  - host: cms.openedx.XXX.XXX
    http:
      paths:
      - backend:
          service:
            name: caddy
            port:
              number: 80
        path: /
        pathType: Prefix
  - host: preview.openedx.XXX.XXX
    http:
      paths:
      - backend:
          service:
            name: caddy
            port:
              number: 80
        path: /
        pathType: Prefix
  - host: openedx.discovery.XXX.XXX
    http:
      paths:
      - backend:
          service:
            name: caddy
            port:
              number: 80
        path: /
        pathType: Prefix
  - host: apps.openedx.XXX.XXX
    http:
      paths:
      - backend:
          service:
            name: caddy
            port:
              number: 80
        path: /
        pathType: Prefix

actually I am not sure if such ingress is good to work.
I have took some times to figure it out the export error but failed.
Could someone share there experience when configuring the ingress?

Your ingress should also redirect traffic from files.openedx.xxx.aaa.bbb if you are running the MinIO plugin.

EDIT: your question inspired me to write this issue: Many users have trouble figuring out which ingress hosts need to be proxied · Issue #7 · openedx/wg-devops · GitHub

1 Like

This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.