dapr: Error in sidecars after upgrading from 1.3.1 to 1.4.0
In what area(s)?
/area test-and-release
What version of Dapr?
1.4.0
Expected Behavior
upgrading DAPR from 1.3.1 to 1.4.0 should work without an error in the sidecars.
Actual Behavior
I upgraded DAPR from 1.3.1 to 1.4.0 then sidecars failed.
Steps to Reproduce the Problem
We use DAPR helm chart. After the upgrade we see an error in the sidecar logs.
failed to append PEM root cert to x509 CertPool
Sidecar Logs:
Release Note
RELEASE NOTE: FIX Bug in runtime about appending PEM root cert
About this issue
- Original URL
- State: closed
- Created 3 years ago
- Comments: 20 (13 by maintainers)
It looks like this happens when mTLS is disabled.
We should add upgrade e2e tests for non-mTLS installations as well. I’ll take a look at reproing and fixing it this week.
@PeterGerrard, please setup a valid certicicate or enable sentry.
Now TSL is enabled by default for the placement service (even if you don’t use it) so I think you need a valid certificate or you must enable sentry.
We have upgraded to both 1.4.0 and 1.4.3 and seen the error