GitHub user dosubot[bot] added a comment to the discussion: How to connect to external redis db database? Using supersetNode.connections
<!-- Greeting --> Hi @pablorsk! I'm [Dosu](https://go.dosu.dev/dosubot) and Iām helping the superset team. <!-- Answer --> The validation and runtime errors you're seeing are due to a mismatch between the Helm chart's default/example values for `ssl_cert_reqs` and what the Redis Python client (`redis-py`) actually accepts. The chart suggests values like `CERT_NONE` or `CERT_REQUIRED`, but the Redis client expects `'none'`, `'optional'`, or `'required'` (case-insensitive) as strings. Using the wrong value causes errors like `Invalid SSL Certificate Requirements Flag: CERT_NONE` and insecure fallback behavior [source](https://github.com/apache/superset/blob/829e4d92d91ceae4b43b1ed3b063ffe45377799c/superset/async_events/cache_backend.py). To connect to a managed Redis instance with TLS, set your values like this: ```yaml supersetNode: connections: redis_host: "your-redis-host" redis_port: "your-redis-port" redis_cache_db: "2" redis_celery_db: "2" redis_user: "" redis_password: "yourpassword" redis_ssl: enabled: true ssl_cert_reqs: "required" # valid values: "none", "optional", "required" ``` Make sure `ssl_cert_reqs` is set to `"required"` (or `"none"`/`"optional"` if your Redis setup allows it). Do not use `CERT_NONE`, `CERT_REQUIRED`, or integer values [source](https://github.com/apache/superset/blob/829e4d92d91ceae4b43b1ed3b063ffe45377799c/helm/superset/values.yaml). There are currently no recent fixes in the chart or codebase for this validation issue, so using the correct string values is the way to resolve it [source](https://github.com/apache/superset/blob/829e4d92d91ceae4b43b1ed3b063ffe45377799c/helm/superset/templates/_helpers.tpl). <!-- Dosu Comment Footer --> *To reply, just mention [@dosu](https://go.dosu.dev/dosubot).* --- <sup>How did I do? [Good](https://app.dosu.dev/response-feedback/b7af70a0-75ce-40c7-ac1c-c79bbe1726b4?feedback_type=great_response) | [Irrelevant](https://app.dosu.dev/response-feedback/b7af70a0-75ce-40c7-ac1c-c79bbe1726b4?feedback_type=irrelevant_answer) | [Incorrect](https://app.dosu.dev/response-feedback/b7af70a0-75ce-40c7-ac1c-c79bbe1726b4?feedback_type=incorrect_sources) | [Verbose](https://app.dosu.dev/response-feedback/b7af70a0-75ce-40c7-ac1c-c79bbe1726b4?feedback_type=too_verbose) | [Hallucination](https://app.dosu.dev/response-feedback/b7af70a0-75ce-40c7-ac1c-c79bbe1726b4?feedback_type=hallucination) | [Report š](https://app.dosu.dev/response-feedback/b7af70a0-75ce-40c7-ac1c-c79bbe1726b4?feedback_type=bug_report) | [Other](https://app.dosu.dev/response-feedback/b7af70a0-75ce-40c7-ac1c-c79bbe1726b4?feedback_type=other)</sup> [](https://app.dosu.dev/a28d3c7e-a9d3-459e-9fb6-3a6f9ff4f357/ask?utm_source=github)& nbsp;[](https://go.dosu.dev/discord-bot) [](https://twitter.com/intent/tweet?text=%40dosu_ai%20helped%20me%20solve%20this%20issue!&url=https%3A//github.com/apache/superset/discussions/35496) GitHub link: https://github.com/apache/superset/discussions/35496#discussioncomment-14587456 ---- This is an automatically sent email for [email protected]. To unsubscribe, please send an email to: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
