tls

Weaviate service unavailable after TLS certificate expiration

by
a rack of servers in a server room

Problem – Weaviate Service Unavailable After TLS Certificate Expiration In a cloud‑managed Weaviate deployment (e.g., on AWS EKS or GKE) the API endpoint becomes unreachable shortly after the TLS/SSL certificate used by the Ingress controller or the ALB expires. Clients see errors such as: x509: certificate has expired or is not yet valid TLS handshake … Read more

Hugging Face Transformers SSL/TLS handshake failure in Kubernetes

by
Transformer robot

Hugging Face Transformers SSL/TLS Handshake Failure in a Canary Deployment on Kubernetes Problem Description During a staged rollout of a model‑inference service that uses Hugging Face Transformers, a subset of pods (the canary) repeatedly fail to load pretrained models from https://huggingface.co. The failure manifests as: Log entry from the Transformers library: urllib3.exceptions.SSLError: HTTPSConnectionPool(host=’huggingface.co’, port=443): Max … Read more

Haystack SSL/TLS handshake failure with self-signed certificates

by
a close up of hay bales stacked on top of each other

Problem – Haystack TLS Handshake Fails in a Local Development Sandbox When running a multi‑service Haystack stack with Docker Compose, the inter‑node RPC layer aborts with TLS errors such as: SSLHandshakeException: certificate verify failed (self signed certificate in certificate chain) javax.net.ssl.SSLPeerUnverifiedException: peer not authenticated OpenSSL error: verify error:num=20:unable to get local issuer certificate HaystackNodeError: TLS … Read more