{"@timestamp":"2021-09-28T21:03:48.661Z","log.level":"warning","message":"/opt/lib/poetry/toolhub-2uZo5AhP-py3.7/lib/python3.7/site-packages/urllib3/connectionpool.py:1020: InsecureRequestWarning: Unverified HTTPS request is being made to host 'meta.wikimedia.org'. Adding certificate verification is strongly advised. See: https://urllib3.readthedocs.io/en/1.26.x/advanced-usage.html#ssl-warnings\n InsecureRequestWarning,\n","ecs":{"version":"1.6.0"},"log":{"logger":"py.warnings","origin":{"file":{"line":110,"name":"warnings.py"},"function":"_showwarnmsg"}},"process":{"name":"MainProcess","pid":1,"thread":{"id":139680501651200,"name":"Thread-4123"}},"trace":{"id":"f36d83c8-33e7-45bf-82ce-a6f6b51594f1"}}Description
Details
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Resolved | BUG REPORT | • bd808 | T292025 urllib3 warnings about accessing meta.wikimedia.org from eqiad k8s cluster | ||
| Resolved | BUG REPORT | • bd808 | T291447 Toolhub container in staging cluster cannot reach meta.wikimedia.org to complete OAuth handshake |
Event Timeline
The fix for this may be to follow up on T291447#7373054 with a deep integration with the social-core library that is handling the OAuth2 authentication handshakes for us.
This warning seems to happen for any use of the url-downloader proxy too:
{"@timestamp":"2021-10-12T18:02:40.344Z","log.level":"warning","message":"/opt/lib/poetry/toolhub-2uZo5AhP-py3.7/lib/python3.7/site-packages/urllib3/connectionpool.py:1020: InsecureRequestWarning: Unverified HTTPS request is being made to host 'url-downloader.eqiad.wikimedia.org'. Adding certificate verification is strongly advised. See: https://urllib3.readthedocs.io/en/1.26.x/advanced-usage.html#ssl-warnings\n InsecureRequestWarning,\n","ecs":{"version":"1.7.0"},"log":{"logger":"py.warnings","origin":{"file":{"line":110,"name":"warnings.py"},"function":"_showwarnmsg"}},"process":{"name":"MainProcess","pid":8,"thread":{"id":140418066356032,"name":"MainThread"}},"trace":{"id":"none"}}
Change 730941 had a related patch set uploaded (by BryanDavis; author: Bryan Davis):
[wikimedia/toolhub@main] backend: Add setting to toggle off urllib3 warnings
Change 730941 merged by jenkins-bot:
[wikimedia/toolhub@main] backend: Add setting to toggle off urllib3 warnings
Change 731181 had a related patch set uploaded (by BryanDavis; author: Bryan Davis):
[operations/deployment-charts@master] toolhub: Add URLLIB3_DISABLE_WARNINGS envvar
Change 731181 merged by jenkins-bot:
[operations/deployment-charts@master] toolhub: Add URLLIB3_DISABLE_WARNINGS envvar
Change 731196 had a related patch set uploaded (by BryanDavis; author: Bryan Davis):
[operations/deployment-charts@master] toolhub: Bump container version & set URLLIB3_DISABLE_WARNINGS=True
Change 731196 merged by jenkins-bot:
[operations/deployment-charts@master] toolhub: Bump container version & set URLLIB3_DISABLE_WARNINGS=True