tls: handshake failure on bootstrap

[jenshornan]

Hi!

I get the following error when I try to bootstrap flux. Running on k3s.

failed to checkout and determine revision: unable to clone 'https://github.com/xxxxxxx/starship.git': Get "https://github.com/xxxxxx/starship.git/info/refs?service=git-upload-pack": remote error: tls: handshake failure

This is the command:

flux bootstrap github \
  --token-auth \
  --owner=git \
  --repository=starship \
  --branch=main \
  --path=clusters/my-cluster \
  --personal

I have also set the GITHUB_TOKEN env variable.

Thx!

//Br Jens

[lejeunel]

I'm having the same issue using a gitlab enterprise repo.

I have setup a GITLAB_TOKEN env variable which works fine since flux manages to push its manifests.
The issue, similar to OP, arises when the flux-system/kustomize-controller attempts to clone the repository.

For reference, my bootstrap command looks like the following:

flux bootstrap gitlab --ca-file=<path-to-cert> --token-auth --hostname=<hostname-to-gitlab-server> --owner=<group/subgroup> --repository=<my-repo> --branch=main --path=clusters/dev

[WBorzecki]

I've been running virtualized setup of RKE2 based on Ubuntu Cloud Images using Proxmox last summer and couldn't find any solution to this problem. In 2-3 weeks I will be rebuilding K8S cluster using virtualized Talos so it should tell me if the problem was underlying OS.

However, there are things I haven't tried. I am running OPNsense as my FW and router with Unbound blocking lists which I didn't check (and I guess it's not the case). I would also check (if I could right now) default gateway configuration for virtual machines since I am running default Proxmox network configuration and I've came accross problems with running iPerf3 tests between VMs and the OPNsense (plugin).