Enable TLS for internal cluster and external client

[navneetrajput06]

Hi Team,
We are trying to enable TLS for external and internal communication in our qdrant cluster which is deployed in distributed mode.
While trying to deploy the cluster my pods are not starting with below error.

2024-02-06T18:40:17.596938Z INFO storage::content_manager::consensus::persistent: Loading raft state from ./storage/raft_state.json
Error: No such file or directory (os error 2)

We are using help to deploy and below is the values.yaml

TLS configuration.

Required if either service.enable_tls or cluster.p2p.enable_tls is true.

tls:

Server certificate chain file

cert: /localpath/cert.pem
key: /localpath/key.pem
ca_cert: /localpath/cacert.pem
config:
cluster:
enabled: true
p2p:
enable_tls: true
port: 6335

please help me if i am missing anything and also let us know how we can connect to qdrant cluster using python (configuration parameters to pass the certificate files)

[navneetrajput06]

[timvisee]

2024-02-06T18:40:17.596938Z INFO storage::content_manager::consensus::persistent: Loading raft state from ./storage/raft_state.json
Error: No such file or directory (os error 2)

This error is not related to your TLS configuration.

Could you describe how you start your nodes? Are you doing it t he same way as we describe qdrant.tech/documentation/guides/distributed_deployment?

It is important to set correct --uri and --bootstrap parameters. Also, your storage must not be lost across container restarts. So, storage/raft_state.json should survive container restarts.

[navneetrajput06]

This is happening only when i am saying enable_tls= true in config.cluster.p2p for internal tls. This is Kubernetes cluster.
and also i dint see any solution to copy our custom certificates at the time of deployment using helm.

could you please tell me exact configuration steps using helm to enable tls fir client as well as p2p.