{"action":"opened","issue":{"url":"https://api.github.com/repos/cppforlife/turbulence-release/issues/5","repository_url":"https://api.github.com/repos/cppforlife/turbulence-release","labels_url":"https://api.github.com/repos/cppforlife/turbulence-release/issues/5/labels{/name}","comments_url":"https://api.github.com/repos/cppforlife/turbulence-release/issues/5/comments","events_url":"https://api.github.com/repos/cppforlife/turbulence-release/issues/5/events","html_url":"https://github.com/cppforlife/turbulence-release/issues/5","id":167652411,"number":5,"title":"Turbulence agent is taking first_address, but API might have a floating IP","user":{"login":"voelzmo","id":2256887,"avatar_url":"https://avatars.githubusercontent.com/u/2256887?v=3","gravatar_id":"","url":"https://api.github.com/users/voelzmo","html_url":"https://github.com/voelzmo","followers_url":"https://api.github.com/users/voelzmo/followers","following_url":"https://api.github.com/users/voelzmo/following{/other_user}","gists_url":"https://api.github.com/users/voelzmo/gists{/gist_id}","starred_url":"https://api.github.com/users/voelzmo/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/voelzmo/subscriptions","organizations_url":"https://api.github.com/users/voelzmo/orgs","repos_url":"https://api.github.com/users/voelzmo/repos","events_url":"https://api.github.com/users/voelzmo/events{/privacy}","received_events_url":"https://api.github.com/users/voelzmo/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2016-07-26T16:29:21Z","updated_at":"2016-07-26T16:29:21Z","closed_at":null,"body":"I configured the turbulence API to have a floating IP, so I can access it with the browser without tunneling. Therefore, the SSL cert is also for the floating IP, not for the internal IP.\r\n\r\nHowever, the turbulence-agent [takes simply `api.first_address` as contact](https://github.com/cppforlife/turbulence-release/blob/master/jobs/turbulence_agent/templates/config.json.erb#L9), which resolves to the internal IP. Consequently, the certificate cannot be validated by the agent and connection fails.\r\n\r\n```\r\n$ tail /var/vcap/sys/log/turbulence_agent/stderr.log\r\n[Agent] 2016/07/26 16:28:30 ERROR - Failed fetching tasks: Fetching tasks '984e4ae8-064c-45f0-b917-4a0d19e702b9': Performing request POST 'https://turbulence:p@192.168.0.13:8080/api/v1/agents/984e4ae8-064c-45f0-b917-4a0d19e702b9/tasks': Performing POST request: Post https://turbulence:p@192.168.0.13:8080/api/v1/agents/984e4ae8-064c-45f0-b917-4a0d19e702b9/tasks: x509: certificate is valid for <redacted>, not 192.168.0.13\r\n```"}}
{"actor":{"display_login":"voelzmo"}}