Helm upgrade is invalid while adding SSL Let’sEncrypt for Rasa X on Kubernetes

[Deprecated] Rasa X Community Edition
1

Hi there!

I have been trying to configure an SSL certificate on my Rasa X server, and I followed the complete guide to deploying your rasa assistant 15. Unfortunately, at the last step, when I run Helm upgrade (as follows),

helm upgrade \

–values values.yaml \

–namespace rasa \

–reuse-values \

rasa-x-#### rasa-x/rasa-x

I got this error:

Error: UPGRADE FAILED: cannot patch “rasa-x-####-nginx” with kind Service: Service “rasa-x-####-nginx” is invalid: spec.ports[1].name: Duplicate value: "http"

I’m deploying Rasa X in Azure Kubernetes Services. If there is any advice or another path on how to configure an SSL certificate, I will be happy to read it.

Thanks!

2

Hello KuroInkH,

to debug the problem further - can you post please the ingress section of the values.yaml. Best would be current values.yaml and the old values.yaml.

3

Hello! thank you for your reply.

This is the first value.yml I used to deploy Rasa X, here I didn’t put any ingress settings, just Rasa X, RabbitMQ, and global settings:

values_original.yml (1.2 KB)

Once it is deployed, it creates rasa-x-####-nginx service. The following section has ports and ingress configuration (I modified the ports to point to port 80 instead of 8000):

spec:
  ports:
    - name: http
      protocol: TCP
      port: 80
      targetPort: 8080
      nodePort: xxxx
  selector:
    app.kubernetes.io/component: nginx
    app.kubernetes.io/instance: rasa-x-####
    app.kubernetes.io/name: rasa-x
  clusterIP: xx.x.xxx.xxx
  type: LoadBalancer
  sessionAffinity: None
  externalTrafficPolicy: Cluster
status:
  loadBalancer:
    ingress:
      - ip: xx.xxx.xxx.xxx

Here is the full yaml file: values_current.yaml (2.5 KB)

Finally, this is the new values.yml

ingress:
  annotations:
    ingress.annotations.certmanager.k8s.io/cluster-issuer: letsencrypt-prod
    kubernetes.io/ingress.class: traefik
  hosts:
    - host: rasax.xxxxxx.canadacentral.aksapp.io
      paths:
      - /
  tls:
   - secretName: rasatls
     hosts:
       - rasax.xxxxxx.canadacentral.aksapp.io

Thank you for your help!

4

Hey @KuroInkH,

sorry for the late response. Got sidetracked by live

i dont see much on the values all seems in order - but i see trafik running so best is to check their documentation on Lets Encrypt with trafik.

have tested cert-manager with nginx-ingress with the same configuration, works like a charm.