Page MenuHomePhabricator

urllib3 warnings about accessing meta.wikimedia.org from eqiad k8s cluster
Closed, ResolvedPublicBUG REPORT

Description

{"@timestamp":"2021-09-28T21:03:48.661Z","log.level":"warning","message":"/opt/lib/poetry/toolhub-2uZo5AhP-py3.7/lib/python3.7/site-packages/urllib3/connectionpool.py:1020: InsecureRequestWarning: Unverified HTTPS request is being made to host 'meta.wikimedia.org'. Adding certificate verification is strongly advised. See: https://urllib3.readthedocs.io/en/1.26.x/advanced-usage.html#ssl-warnings\n  InsecureRequestWarning,\n","ecs":{"version":"1.6.0"},"log":{"logger":"py.warnings","origin":{"file":{"line":110,"name":"warnings.py"},"function":"_showwarnmsg"}},"process":{"name":"MainProcess","pid":1,"thread":{"id":139680501651200,"name":"Thread-4123"}},"trace":{"id":"f36d83c8-33e7-45bf-82ce-a6f6b51594f1"}}

Event Timeline

The fix for this may be to follow up on T291447#7373054 with a deep integration with the social-core library that is handling the OAuth2 authentication handshakes for us.

bd808 triaged this task as Medium priority.Oct 1 2021, 5:48 PM
bd808 changed the subtype of this task from "Task" to "Bug Report".

This warning seems to happen for any use of the url-downloader proxy too:

{"@timestamp":"2021-10-12T18:02:40.344Z","log.level":"warning","message":"/opt/lib/poetry/toolhub-2uZo5AhP-py3.7/lib/python3.7/site-packages/urllib3/connectionpool.py:1020: InsecureRequestWarning: Unverified HTTPS request is being made to host 'url-downloader.eqiad.wikimedia.org'. Adding certificate verification is strongly advised. See: https://urllib3.readthedocs.io/en/1.26.x/advanced-usage.html#ssl-warnings\n  InsecureRequestWarning,\n","ecs":{"version":"1.7.0"},"log":{"logger":"py.warnings","origin":{"file":{"line":110,"name":"warnings.py"},"function":"_showwarnmsg"}},"process":{"name":"MainProcess","pid":8,"thread":{"id":140418066356032,"name":"MainThread"}},"trace":{"id":"none"}}
bd808 changed the task status from Open to In Progress.Oct 14 2021, 11:04 PM
bd808 claimed this task.
bd808 moved this task from Backlog to In Progress on the Toolhub board.

Change 730941 had a related patch set uploaded (by BryanDavis; author: Bryan Davis):

[wikimedia/toolhub@main] backend: Add setting to toggle off urllib3 warnings

https://gerrit.wikimedia.org/r/730941

Change 730941 merged by jenkins-bot:

[wikimedia/toolhub@main] backend: Add setting to toggle off urllib3 warnings

https://gerrit.wikimedia.org/r/730941

Change 731181 had a related patch set uploaded (by BryanDavis; author: Bryan Davis):

[operations/deployment-charts@master] toolhub: Add URLLIB3_DISABLE_WARNINGS envvar

https://gerrit.wikimedia.org/r/731181

Change 731181 merged by jenkins-bot:

[operations/deployment-charts@master] toolhub: Add URLLIB3_DISABLE_WARNINGS envvar

https://gerrit.wikimedia.org/r/731181

Change 731196 had a related patch set uploaded (by BryanDavis; author: Bryan Davis):

[operations/deployment-charts@master] toolhub: Bump container version & set URLLIB3_DISABLE_WARNINGS=True

https://gerrit.wikimedia.org/r/731196

Change 731196 merged by jenkins-bot:

[operations/deployment-charts@master] toolhub: Bump container version & set URLLIB3_DISABLE_WARNINGS=True

https://gerrit.wikimedia.org/r/731196