SSL Error in containerized visual recipes despite no SSL used

DrissiReda

I have an error when running visual recipe jobs in containerized execution that I don't have when executing locally in DSS.

This job has S3 input and output in http, the DSS instance is in HTTP. The "Test" button in Settings > Containerized Execution works properly.

Here is the error:

Failed to list files, caused by: SdkClientException: Unable to execute HTTP request: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target, caused by: SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target, caused by: ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target, caused by: SunCertPathBuilderException: unable to find valid certification path to requested target

Full error attached

Turribeach

S3 uses HTTPS. So the issue happens reading your bucket.

DrissiReda

https://community.dataiku.com/discussion/comment/46334#Comment_46334

I'm using a local minio, the endpoint is in HTTP. I didn't provide any certificate, why does it work locally in DSS but not in the containerized execution?

Here is a full log attached.

dku.log

DrissiReda

Another detail to add, since I cannot edit. If I manually translate the visual recipe's transformation into a custom python job or if I use a notebook, both containerized, I have no problem with SSL. It works well as expected, I'm using the base codeEnv since I'm only using basic pandas library for this.

DrissiReda

@Turribeach do you have any leads on how I can debug this?

Yasmine_T

Hi @DrissiReda ,

I hope that you are doing well.

Thank you very much for reaching out. This issue requires further details for investigation. As this is a public forum, we highly discourage sharing any full logs or private information here.

Our support team is here to investigate and help you through the resolution process. Please open a support ticket here: https://support.dataiku.com/support/tickets/new with the job diagnostic over there.

We are looking forward to working with you on this issue.

Thank you very much @Turribeach for your eagerness to help fellow community user:)

Best,

Yasmine