Can't figure out how to enable wss listener i config

[FinitelyFailed]

Hi,

I have this yaml-file for my kubernetes setup:

apiVersion: apps.emqx.io/v2beta1
kind: EMQX
metadata:
  name: gpt-emqx
spec:
  image: emqx:5.7.2
  coreTemplate:
    spec:
      replicas: 3
      volumeClaimTemplates:
        ## more information about storage classes: https://learn.microsoft.com/en-us/azure/aks/concepts-storage#storage-classes
        #storageClassName: default
        resources:
          requests:
            storage: 10Gi
        accessModes:
        - ReadWriteOnce
      extraVolumes:
        - name: emqx-tls
          secret:
            secretName: emqx-tls
      extraVolumeMounts:
        - name: emqx-tls
          mountPath: /mounted/cert
  replicantTemplate:
    spec:
      replicas: 3
      resources:
        requests:
          cpu: 250m
          memory: 1Gi
      extraVolumes:
        - name: emqx-tls
          secret:
            secretName: emqx-tls
      extraVolumeMounts:
        - name: emqx-tls
          mountPath: /mounted/cert
  dashboardServiceTemplate:
    metadata:
      annotations: {
        service.beta.kubernetes.io/azure-dns-label-name: <dashboard-dns-label>
        }
    spec:
      ## more information about load balancer: https://learn.microsoft.com/en-us/azure/aks/load-balancer-standard
      type: LoadBalancer
  listenersServiceTemplate:
    metadata: 
      name: gpt-mqtt-emqx
      annotations: {
        service.beta.kubernetes.io/azure-dns-label-name: <broker-dns-label> 
        } 
    spec:
      ## more information about load balancer: https://learn.microsoft.com/en-us/azure/aks/load-balancer-standard
      type: LoadBalancer
  config:
    data: |
      authentication = [
        {
          mechanism = password_based
          backend = built_in_database
        }
      ]
      dashboard {
        default_password = "<dashboard-password>"
        listeners {
          http {
            # set 'bind = 0' will disable this listener
            bind = "0.0.0.0:18083"
          }
          https {
            # set 'bind = 0' will disable this listener
            bind = "0.0.0.0:18084"
            cacertfile = "/mounted/cert/ca.crt"
            certfile = "/mounted/cert/tls.crt"
            keyfile = "/mounted/cert/tls.key"
          }
        }
      }
      listeners.wss.default {
        enable = true
        enable_authn = quick_deny_anonymous
        bind = "0.0.0.0:8083"
        max_connections = 1024000
        websocket.mqtt_path = "/mqtt"
        ssl_options {
          cacertfile = "/mounted/cert/ca.crt"
          certfile = "/mounted/cert/tls.crt"
          keyfile = "/mounted/cert/tls.key"
          verify = verify_none
          password = "<key-file-password>"
          depth = 11
        }
      }
      listeners.ssl.default {
        enable = true
        enable_authn = quick_deny_anonymous
        ssl_options {
          cacertfile = "/mounted/cert/ca.crt"
          certfile = "/mounted/cert/tls.crt"
          keyfile = "/mounted/cert/tls.key"
          verify = verify_none
          password = "<key-file-password>"
          depth = 11
        }
      } 
      listeners.tcp.default {
        enable = false
        enable_authn = quick_deny_anonymous
      }
      listeners.ws.default.enable = false

The ssl listener works nicely, but not the wss one. For some reason it stays disabled.

I try to set up the kubernets cluster using kubectl replace --force -f emqx_deployment.yaml, which seems to work.

What am I doing wrong?

[Rory-Z]

The ssl listener works nicely, but not the wss one. For some reason it stays disabled.

Hi @FinitelyFailed Cloud you please tell me more about it ? How do you find the wss is not work ? Could you please share the wrong EMQX logs ?