Having a newly configured consul/nomad cluster with a nomad node next to it, running consul-client in a docker container. “Things” seem to be working, in that I can run a couple of fakeservice instances and configure them, using curl to access the respective ports per allocation. The consul client i…

Hi @MWinther I suspect you may be running into Consul Connect sidecar proxies require additional configuration for gRPC-TLS listener · Issue #15360 · hashicorp/nomad · GitHub - where Consul made a backwards incompatible change to how grpc TLS connections are handled. On the Nomad side you’ll now nee…

Hey @seth.hoenig and thanks for replying! It seems, from what I can tell from that ticket, that it should be solved using 1.5.0 of Nomad. Does that still require the consul.grpc_ca_file setting? In the meantime, I have set the grpc_address to the 8502 port and reopened the non-tls port in the Consu…

Nomad 1.5 is what makes setting consul.grpc_ca_file possible - we had to add that in order to work with Consul 1.14+. I probably wouldn’t try to make use of 8502 / non-TLS at this point if Consul is setup with TLS - it’s just more confusing and less secure. Just to make sure, you’re running Nomad…

Hi @seth.hoenig , thanks for your quick reply! So, when I tried setting the grpc_ca_file to my actual CA earlier, I was informed that it didn’t approve. I guess that is because since I am using auto_config with my consul I don’t get the complete certificate chain out to the client, and it has no wa…

A little bit more information after some further experimentation. I went back and tried to use my host certificate for the nomad node, and received the following error after adding CA, cert and key to the consul section of the nomad.hcl config file. address = "127.0.0.1:8500" grpc_address = "12…

Nomad countdash tutorial disconnected troubleshooting

Nomad

Material-Scientist July 18, 2025, 11:10am 7

Figured it out: How do I get the envoy sidecar to connect to Consul over TLS? - #2 by Material-Scientist

Topic		Replies	Views
Nomad Job with Consul Connect (CA Provider : Vault) Nomad connect , vault , consul-nomad , consul	0	523	September 28, 2022
Envoy -> consul "upstream connect error or disconnect/reset before headers. reset reason: connection termination" Consul connect	5	6773	March 9, 2023
Nomad + Consul Connect Nomad	2	1436	September 16, 2019
Nomad can't communicate with consul Nomad consul-nomad , consul	1	695	June 10, 2023
How do I get the envoy sidecar to connect to Consul over TLS? Nomad connect , consul	1	885	July 18, 2025

Nomad countdash tutorial disconnected troubleshooting

Related topics