Fix flow-collector docker-compose mTLS config #2971

Merged

mfreeman451 merged 1 commit from refs/pull/2971/head into staging

2026-02-26 23:27:56 +00:00

mfreeman451 commented

2026-02-26 23:25:51 +00:00

(Migrated from github.com)

Owner

Imported from GitHub pull request.

Original GitHub pull request: #2922
Original author: @mfreeman451
Original URL: https://github.com/carverauto/serviceradar/pull/2922
Original created: 2026-02-26T23:25:51Z
Original updated: 2026-02-26T23:27:57Z
Original head: carverauto/serviceradar:docker/docker-compose-stack-broken
Original base: staging
Original merged: 2026-02-26T23:27:56Z by @mfreeman451

Summary

Add docker/compose/flow-collector.docker.json with proper mTLS security and NATS creds file, matching the pattern used by trapd and other services
Update docker-compose.yml to mount the docker-specific config (instead of the bare rust/flow-collector/flow-collector.json) and add the NATS creds volume mount

The flow-collector was failing to connect to NATS with UnknownIssuer because the config had nats:// (no TLS) and was missing the NATS creds file. After this fix, git pull && docker compose up -d works cleanly.

Test plan

docker compose up -d - all 14 containers up and healthy
flow-collector connects to NATS with mTLS: Connected to NATS at tls://nats:4222 and ensured stream 'events' exists
Both sflow (6343) and netflow (2055) listeners running

🤖 Generated with Claude Code

Imported from GitHub pull request. Original GitHub pull request: #2922 Original author: @mfreeman451 Original URL: https://github.com/carverauto/serviceradar/pull/2922 Original created: 2026-02-26T23:25:51Z Original updated: 2026-02-26T23:27:57Z Original head: carverauto/serviceradar:docker/docker-compose-stack-broken Original base: staging Original merged: 2026-02-26T23:27:56Z by @mfreeman451 --- ## Summary - Add `docker/compose/flow-collector.docker.json` with proper mTLS security and NATS creds file, matching the pattern used by trapd and other services - Update `docker-compose.yml` to mount the docker-specific config (instead of the bare `rust/flow-collector/flow-collector.json`) and add the NATS creds volume mount The flow-collector was failing to connect to NATS with `UnknownIssuer` because the config had `nats://` (no TLS) and was missing the NATS creds file. After this fix, `git pull && docker compose up -d` works cleanly. ## Test plan - [x] `docker compose up -d` - all 14 containers up and healthy - [x] flow-collector connects to NATS with mTLS: `Connected to NATS at tls://nats:4222 and ensured stream 'events' exists` - [x] Both sflow (6343) and netflow (2055) listeners running 🤖 Generated with [Claude Code](https://claude.com/claude-code)