[
https://issues.apache.org/jira/browse/FLINK-21414?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17295056#comment-17295056
]
Matthias commented on FLINK-21414:
----------------------------------
Hello Bhagi,
this could be a configuration issue. Have you been able to resolve it already?
As a side note: Things like that are more likely to be picked up on the [User
Mailing
List|https://flink.apache.org/community.html#how-to-subscribe-to-a-mailing-list].
> javax.net.ssl.SSLHandshakeException: Received fatal alert: certificate_unknown
> ------------------------------------------------------------------------------
>
> Key: FLINK-21414
> URL: https://issues.apache.org/jira/browse/FLINK-21414
> Project: Flink
> Issue Type: Bug
> Components: Deployment / Kubernetes
> Affects Versions: 1.12.0
> Environment: flink@flink-jobmanager-5d9594b76c-t6cc8:~$ cat
> /etc/os-release
> PRETTY_NAME="Debian GNU/Linux 10 (buster)"
> NAME="Debian GNU/Linux"
> VERSION_ID="10"
> VERSION="10 (buster)"
> VERSION_CODENAME=buster
> ID=debian
> Reporter: Bhagi
> Priority: Critical
> Fix For: 1.12.0
>
> Attachments: image-2021-02-19-12-26-27-296.png
>
>
> Enabled High availability for FLink with kubernetes API with Leader election
> and retirieval mechanism,After configuring HA parameters with Leader election
> and Leader retrival ..I started getting this error in job manager logs.
> +error logs in job manager logs:+
> at
> org.apache.flink.shaded.netty4.io.netty.handler.ssl.SslHandler$SslEngineType$3.unwrap(SslHandler.java:282)
> ~[flink-dist_2.11-1.12.0.jar:1.12.0]
> at
> org.apache.flink.shaded.netty4.io.netty.handler.ssl.SslHandler.unwrap(SslHandler.java:1372)
> ~[flink-dist_2.11-1.12.0.jar:1.12.0]
> at
> org.apache.flink.shaded.netty4.io.netty.handler.ssl.SslHandler.decodeJdkCompatible(SslHandler.java:1267)
> ~[flink-dist_2.11-1.12.0.jar:1.12.0]
> at
> org.apache.flink.shaded.netty4.io.netty.handler.ssl.SslHandler.decode(SslHandler.java:1314)
> ~[flink-dist_2.11-1.12.0.jar:1.12.0]
> at
> org.apache.flink.shaded.netty4.io.netty.handler.codec.ByteToMessageDecoder.decodeRemovalReentryProtection(ByteToMessageDecoder.java:501)
> ~[flink-dist_2.11-1.12.0.jar:1.12.0]
> at
> org.apache.flink.shaded.netty4.io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:440)
> ~[flink-dist_2.11-1.12.0.jar:1.12.0]
> ... 16 more
> 2021-02-19 06:11:04,358 WARN
> org.apache.flink.runtime.dispatcher.DispatcherRestEndpoint [] - Unhandled
> exception
> org.apache.flink.shaded.netty4.io.netty.handler.codec.DecoderException:
> javax.net.ssl.SSLHandshakeException: Received fatal alert: certificate_unknown
> at
> org.apache.flink.shaded.netty4.io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:471)
> ~[flink-dist_2.11-1.12.0.jar:1.12.0]
> at
> org.apache.flink.shaded.netty4.io.netty.handler.codec.ByteToMessageDecoder.channelRead(ByteToMessageDecoder.java:276)
> ~[flink-dist_2.11-1.12.0.jar:1.12.0]
> at org
>
> +UI is throwing error:+
> {"errors":["Service temporarily unavailable due to an ongoing leader
> election. Please refresh."]}[link
> title|[http://example.com]|http://example.com]/]
> !image-2021-02-19-12-26-27-296.png!
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
