Consul service checks failing when TLS is enabled on Patroni Rest API about patroni HOT 5 CLOSED

Consul can't use client certificates for health check requests.
That's not a Patroni problem.

from patroni.

@CyberDem0n But as per the documentation if PATRONI_REST_API_VERIFY_CLIENTS is set to 'none', Patroni shouldn't fail any requests with "bad certificate" error. Isn't that right?

from patroni.

@ponvenkates there is nothing in your original message explaining how you configured restapi.

from patroni.

Sorry about that. I have configured the api using environment variables.

PATRONI_RESTAPI_CONNECT_ADDRESS="Node IP:8008"
PATRONI_RESTAPI_LISTEN="0.0.0.0:8008"
PATRONI_RESTAPI_USERNAME="admin"
PATRONI_RESTAPI_PASSWORD="admin password"
PATRONI_RESTAPI_CERTFILE="server cert file location"
PATRONI_RESTAPI_KEYFILE="server key file location"
PATRONI_RESTAPI_CAFILE="root cert file location"

PATRONI_RESTAPI_VERIFY_CLIENT is not set leaving it to default 'none' as per the document.

from patroni.

This error could be an indicator that something is wrong with certificates (which is again not a Patroni problem).
Please try to access Patroni REST API with curl -k and see if it works.

from patroni.