3pp-mirror/pomerium
1
0
Fork 0
mirror of https://github.com/pomerium/pomerium.git synced 2025-05-02 20:06:03 +02:00
Code Issues Projects Releases Packages Wiki Activity

feat(docs) Add Redis FLUSHALL doc on how and when to execute commands (#3192)

Browse source 
* feat(docs) Add Redis FLUSHALL doc on how and when to execute commands

* fix(docs) Move flushall command to troubleshooting section

* copy edits

* crosslink

Co-authored-by: alexfornuto <afornuto@pomerium.com>
This commit is contained in:
Sara Jarjoura - Sensible 2022-03-30 11:11:32 -04:00 • committed by GitHub
parent 2dc778035d
commit b83bb8f2f7
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 12 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
docs/docs/topics/data-storage.md
View file

@ -81,3 +81,7 @@ databroker_storage_ca_file: /tls/ca.pem
::: tip
the second `s` in `rediss` is intentional and turns on TLS support
:::
## Troubleshooting
Most issues with the Databroker service are caused by a [`shared_secret`](/reference/readme.md#shared-secret) mismatch between services. See [Troubleshooting - Shared Secret Mismatch](/docs/troubleshooting.md#shared-secret-mismatch) for details.

8
docs/docs/troubleshooting.md
View file

@ -159,6 +159,14 @@ When using Redis, the [shared secret](/reference/readme.md#shared-secret) is use
The resolution is to flush the Redis database with [`FLUSHDB`](https://redis.io/commands/flushdb) or [`FLUSHALL`](https://redis.io/commands/FLUSHALL).
An example of how to do this on Kubernetes with TLS enabled is to use `kubectl` to execute a command on the master pod:
```bash
kubectl exec -it pomerium-redis-master-0 -- redis-cli --tls --cert /opt/bitnami/redis/certs/tls.crt --key /opt/bitnami/redis/certs/tls.key --cacert /opt/bitnami/redis/certs/ca.crt FLUSHALL ASYNC
```
Adjust `pomerium-redis-master-0` to match your pod name. If TLS is not enabled, you may omit the TLS options.
### RPC Errors
#### certificate signed by unknown authority