Helm upgrade is invalid while adding SSL Let’sEncrypt for Rasa X on Kubernetes

Hi there!

I have been trying to configure an SSL certificate on my Rasa X server, and I followed the complete guide to deploying your rasa assistant 15. Unfortunately, at the last step, when I run Helm upgrade (as follows),

helm upgrade \

–values values.yaml \

–namespace rasa \

–reuse-values \

rasa-x-#### rasa-x/rasa-x

I got this error:

Error: UPGRADE FAILED: cannot patch “rasa-x-####-nginx” with kind Service: Service “rasa-x-####-nginx” is invalid: spec.ports[1].name: Duplicate value: "http"

I’m deploying Rasa X in Azure Kubernetes Services. If there is any advice or another path on how to configure an SSL certificate, I will be happy to read it.


Hello KuroInkH,

to debug the problem further - can you post please the ingress section of the values.yaml. Best would be current values.yaml and the old values.yaml.

Hello! thank you for your reply.

This is the first value.yml I used to deploy Rasa X, here I didn’t put any ingress settings, just Rasa X, RabbitMQ, and global settings:

values_original.yml (1.2 KB)

Once it is deployed, it creates rasa-x-####-nginx service. The following section has ports and ingress configuration (I modified the ports to point to port 80 instead of 8000):

    - name: http
      protocol: TCP
      port: 80
      targetPort: 8080
      nodePort: xxxx
    app.kubernetes.io/component: nginx
    app.kubernetes.io/instance: rasa-x-####
    app.kubernetes.io/name: rasa-x
  clusterIP: xx.x.xxx.xxx
  type: LoadBalancer
  sessionAffinity: None
  externalTrafficPolicy: Cluster
      - ip: xx.xxx.xxx.xxx

Here is the full yaml file: values_current.yaml (2.5 KB)

Finally, this is the new values.yml

    ingress.annotations.certmanager.k8s.io/cluster-issuer: letsencrypt-prod
    kubernetes.io/ingress.class: traefik
    - host: rasax.xxxxxx.canadacentral.aksapp.io
      - /
   - secretName: rasatls
       - rasax.xxxxxx.canadacentral.aksapp.io

Thank you for your help!

Hey @KuroInkH,

sorry for the late response. Got sidetracked by live

i dont see much on the values all seems in order - but i see trafik running so best is to check their documentation on Lets Encrypt with trafik.

have tested cert-manager with nginx-ingress with the same configuration, works like a charm.