GitHub user pablorsk created a discussion: How to connect to external redis db
database? Using supersetNode.connections
## Short summary
redis_tls: supersetNode.connections.redis_ssl=true causes validation / SSL
errors
When configuring Redis TLS via the chart `supersetNode.connections`
(apache/superset chart v0.14.3) I get validation and runtime errors. The
chart/runtime appears to validate `ssl_cert_reqs` in an unexpected format and
the redis client / Celery falls back to insecure behaviour because no SSL
options are passed. Resulting errors include `Invalid SSL Certificate
Requirements Flag: CERT_NONE` and repeated warnings `Secure redis scheme
specified (rediss) with no ssl options, defaulting to insecure SSL behaviour.`
## Short summary
## Environment
- Chart: `apache/superset` (version `0.14.3`)
- Kubernetes: DigitalOcean DOKS
- Superset image: `apache/superset` (Python 3.10 runtime)
- Redis: DigitalOcean Managed Redis (TLS) — example host:
`rscache-do-user-1845382-0.b.db.ondigitalocean.com:25061`
- Observed in web and celeryworker pods
## Values I used (sensitive values redacted)
```yaml
supersetNode:
connections:
redis_host: "myrediscay-do-user-1234-0.b.db.ondigitalocean.com"
redis_port: "25062"
redis_cache_db: "2"
redis_celery_db: "2"
redis_user: ""
redis_password: "myapssword"
redis_ssl:
enabled: true
```
I also tried adding ssl_cert_reqs as "CERT_REQUIRED" and as 2 but got
validation errors:
Invalid SSL Certificate Requirements Flag: CERT_REQUIRED
Invalid SSL Certificate Requirements Flag: 2
This is related with #22900.
GitHub link: https://github.com/apache/superset/discussions/35496
----
This is an automatically sent email for [email protected].
To unsubscribe, please send an email to:
[email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
