{"action":"created","issue":{"url":"https://api.github.com/repos/cloudfoundry/bosh-deployment/issues/72","repository_url":"https://api.github.com/repos/cloudfoundry/bosh-deployment","labels_url":"https://api.github.com/repos/cloudfoundry/bosh-deployment/issues/72/labels{/name}","comments_url":"https://api.github.com/repos/cloudfoundry/bosh-deployment/issues/72/comments","events_url":"https://api.github.com/repos/cloudfoundry/bosh-deployment/issues/72/events","html_url":"https://github.com/cloudfoundry/bosh-deployment/pull/72","id":227893866,"number":72,"title":"Bosh director is receiving certificate errors talking to credhub on 127.0.0.1","user":{"login":"m-richo","id":516454,"avatar_url":"https://avatars0.githubusercontent.com/u/516454?v=3","gravatar_id":"","url":"https://api.github.com/users/m-richo","html_url":"https://github.com/m-richo","followers_url":"https://api.github.com/users/m-richo/followers","following_url":"https://api.github.com/users/m-richo/following{/other_user}","gists_url":"https://api.github.com/users/m-richo/gists{/gist_id}","starred_url":"https://api.github.com/users/m-richo/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/m-richo/subscriptions","organizations_url":"https://api.github.com/users/m-richo/orgs","repos_url":"https://api.github.com/users/m-richo/repos","events_url":"https://api.github.com/users/m-richo/events{/privacy}","received_events_url":"https://api.github.com/users/m-richo/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2017-05-11T06:49:19Z","updated_at":"2017-05-11T20:55:50Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/cloudfoundry/bosh-deployment/pulls/72","html_url":"https://github.com/cloudfoundry/bosh-deployment/pull/72","diff_url":"https://github.com/cloudfoundry/bosh-deployment/pull/72.diff","patch_url":"https://github.com/cloudfoundry/bosh-deployment/pull/72.patch"},"body":"**TLDR** - This PR configures the BOSH director to connect to credhub over the hosts network IP address rather than `127.0.0.1` due to the common name of the credhub certificate.\r\n\r\n**Details Below**\r\ni provisioned a local BOSH director with UAA and credhub (details below).\r\n```\r\nbosh2 create-env ./bosh.yml \\\r\n--state ./state.json \\\r\n--vars-store ./creds.yml \\\r\n-o ./virtualbox/cpi.yml \\\r\n-o ./virtualbox/outbound-network.yml \\\r\n-o ./bosh-lite.yml \\\r\n-o ./bosh-lite-runc.yml \\\r\n-o ./jumpbox-user.yml \\\r\n-o ./uaa.yml \\\r\n-o ./credhub.yml \\\r\n-v director_name=\"Bosh Lite Director\" \\\r\n-v internal_ip=192.168.50.6 \\\r\n-v internal_gw=192.168.50.1 \\\r\n-v internal_cidr=192.168.50.0/24 \\\r\n-v outbound_network_name=NatNetwork\r\n```\r\nWhile the deployment of the director was successful, attempts at deploying BOSH releases that used credhub for generated credentials failed with certificate errors.\r\n```\r\n+ name: concourse\r\n\r\n+ variables:\r\n+ - name: postgresql-concourse-password\r\n+   type: password\r\n\r\nContinue? [yN]: y\r\n\r\nTask 5\r\n\r\n04:11:05 | Preparing deployment: Preparing deployment (00:00:00)\r\n            L Error: hostname \"127.0.0.1\" does not match the server certificate\r\n\r\n04:11:05 | Error: hostname \"127.0.0.1\" does not match the server certificate\r\n\r\nStarted  Thu May 11 04:11:05 UTC 2017\r\nFinished Thu May 11 04:11:05 UTC 2017\r\nDuration 00:00:00\r\n```\r\n\r\nInspecting the cert for the credhub `https://192.168.50.6:8844/` shows a common name of `192.168.50.6`.\r\n\r\n"},"comment":{"url":"https://api.github.com/repos/cloudfoundry/bosh-deployment/issues/comments/300914396","html_url":"https://github.com/cloudfoundry/bosh-deployment/pull/72#issuecomment-300914396","issue_url":"https://api.github.com/repos/cloudfoundry/bosh-deployment/issues/72","id":300914396,"user":{"login":"m-richo","id":516454,"avatar_url":"https://avatars0.githubusercontent.com/u/516454?v=3","gravatar_id":"","url":"https://api.github.com/users/m-richo","html_url":"https://github.com/m-richo","followers_url":"https://api.github.com/users/m-richo/followers","following_url":"https://api.github.com/users/m-richo/following{/other_user}","gists_url":"https://api.github.com/users/m-richo/gists{/gist_id}","starred_url":"https://api.github.com/users/m-richo/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/m-richo/subscriptions","organizations_url":"https://api.github.com/users/m-richo/orgs","repos_url":"https://api.github.com/users/m-richo/repos","events_url":"https://api.github.com/users/m-richo/events{/privacy}","received_events_url":"https://api.github.com/users/m-richo/received_events","type":"User","site_admin":false},"created_at":"2017-05-11T20:55:50Z","updated_at":"2017-05-11T20:55:50Z","body":"I've now signed and submitted the individual CLA to `contributors@cloudfoundry.org.`"}}
{"actor":{"display_login":"m-richo"}}