AWS ALB配置HTTPS对接ECS上SonarQube：Jenkins连接失败求助

问题背景 #

我们需要通过AWS ALB为ECS上的SonarQube服务器提供HTTPS访问，已完成以下配置：

• ALB监听443和9000端口
• 流量转发至监听9000端口的目标组

当前状态：浏览器可正常通过HTTPS访问SonarQube服务，但Jenkins流水线无法通过HTTPS连接该服务，需排查配置问题并实现Jenkins安全发送分析数据至SonarQube。

报错信息 #

ERROR: SonarQube server [https://sonar-qa.macropay.mx] can not be reached 
INFO: ------------------------------------------------------------------------ 
INFO: EXECUTION FAILURE 
INFO: ------------------------------------------------------------------------ 
INFO: Total time: 0.475s 
INFO: Final Memory: 3M/17M 
INFO: ------------------------------------------------------------------------ 
ERROR: Error during SonarScanner execution 
org.sonarsource.scanner.api.internal.ScannerException: Unable to execute SonarScanner analysis 
	at org.sonarsource.scanner.api.internal.IsolatedLauncherFactory.lambda$createLauncher$0(IsolatedLauncherFactory.java:85) 
	at java.base/java.security.AccessController.doPrivileged(AccessController.java:318) 
	at org.sonarsource.scanner.api.internal.IsolatedLauncherFactory.createLauncher(IsolatedLauncherFactory.java:74) 
	at org.sonarsource.scanner.api.internal.IsolatedLauncherFactory.createLauncher(IsolatedLauncherFactory.java:70) 
	at org.sonarsource.scanner.api.EmbeddedScanner.doStart(EmbeddedScanner.java:185) 
	at org.sonarsource.scanner.api.EmbeddedScanner.start(EmbeddedScanner.java:123) 
	at org.sonarsource.scanner.cli.Main.execute(Main.java:74) 
	at org.sonarsource.scanner.cli.Main.main(Main.java:62) 
Caused by: java.lang.IllegalStateException: Fail to get bootstrap index from server 
	at org.sonarsource.scanner.api.internal.BootstrapIndexDownloader.getIndex(BootstrapIndexDownloader.java:42) 
	at org.sonarsource.scanner.api.internal.JarDownloader.getScannerEngineFiles(JarDownloader.java:58) 
	at org.sonarsource.scanner.api.internal.JarDownloader.download(JarDownloader.java:53) 
	at org.sonarsource.scanner.api.internal.IsolatedLauncherFactory.lambda$createLauncher$0(IsolatedLauncherFactory.java:76) 
	... 7 more 
Caused by: java.net.UnknownHostException: sonar-qa.macropay.mx: Name or service not known 
	at java.base/java.net.Inet6AddressImpl.lookupAllHostAddr(Native Method) 
	at java.base/java.net.InetAddress$PlatformNameService.lookupAllHostAddr(InetAddress.java:934) 
	at java.base/java.net.InetAddress.getAddressesFromNameService(InetAddress.java:1543) 
	at java.base/java.net.InetAddress$NameServiceAddresses.get(InetAddress.java:852) 
	at java.base/java.net.InetAddress.getAllByName0(InetAddress.java:1533) 
	at java.base/java.net.InetAddress.getAllByName(InetAddress.java:1385) 
	at java.base/java.net.InetAddress.getAllByName(InetAddress.java:1306) 
	at org.sonarsource.scanner.api.internal.shaded.okhttp.Dns.lambda$static$0(Dns.java:39) 
	at org.sonarsource.scanner.api.internal.shaded.okhttp.internal.connection.RouteSelector.resetNextInetSocketAddress(RouteSelector.java:171) 
	at org.sonarsource.scanner.api.internal.shaded.okhttp.internal.connection.RouteSelector.nextProxy(RouteSelector.java:135) 
	at org.sonarsource.scanner.api.internal.shaded.okhttp.internal.connection.RouteSelector.next(RouteSelector.java:84) 
	at org.sonarsource.scanner.api.internal.shaded.okhttp.internal.connection.ExchangeFinder.findConnection(ExchangeFinder.java:187) 
	at org.sonarsource.scanner.api.internal.shaded.okhttp.internal.connection.ExchangeFinder.findHealthyConnection(ExchangeFinder.java:108) 
	at org.sonarsource.scanner.api.internal.shaded.okhttp.internal.connection.ExchangeFinder.find(ExchangeFinder.java:88) 
	at org.sonarsource.scanner.api.internal.shaded.okhttp.internal.connection.Transmitter.newExchange(Transmitter.java:169) 
	at org.sonarsource.scanner.api.internal.shaded.okhttp.internal.connection.ConnectInterceptor.intercept(ConnectInterceptor.java:41) 
	at org.sonarsource.scanner.api.internal.shaded.okhttp.internal.http.RealInterceptorChain.proceed(RealInterceptorChain.java:142) 
	at org.sonarsource.scanner.api.internal.shaded.okhttp.internal.http.RealInterceptorChain.proceed(RealInterceptorChain.java:117) 
	at org.sonarsource.scanner.api.internal.shaded.okhttp.internal.cache.CacheInterceptor.intercept(CacheInterceptor.java:94) 
	at org.sonarsource.scanner.api.internal.shaded.okhttp.internal.http.RealInterceptorChain.proceed(RealInterceptorChain.java:142) 
	at org.sonarsource.scanner.api.internal.shaded.okhttp.internal.http.RealInterceptorChain.proceed(RealInterceptorChain.java:117) 
	at org.sonarsource.scanner.api.internal.shaded.okhttp.internal.http.BridgeInterceptor.intercept(BridgeInterceptor.java:93) 
	at org.sonarsource.scanner.api.internal.shaded.okhttp.internal.http.RealInterceptorChain.proceed(RealInterceptorChain.java:142) 
	at org.sonarsource.scanner.api.internal.shaded.okhttp.internal.http.RetryAndFollowUpInterceptor.intercept(RetryAndFollowUpInterceptor.java:88) 
	at org.sonarsource.scanner.api.internal.shaded.okhttp.internal.http.RealInterceptorChain.proceed(RealInterceptorChain.java:142) 
	at org.sonarsource.scanner.api.internal.shaded.okhttp.internal.http.RealInterceptorChain.proceed(RealInterceptorChain.java:117) 
	at org.sonarsource.scanner.api.internal.shaded.okhttp.RealCall.getResponseWithInterceptorChain(RealCall.java:221) 
	at org.sonarsource.scanner.api.internal.shaded.okhttp.RealCall.execute(RealCall.java:81) 
	at org.sonarsource.scanner.api.internal.ServerConnection.callUrl(ServerConnection.java:115) 
	at org.sonarsource.scanner.api.internal.ServerConnection.downloadString(ServerConnection.java:99) 
	at org.sonarsource.scanner.api.internal.BootstrapIndexDownloader.getIndex(BootstrapIndexDownloader.java:39) 
	... 10 more 
ERROR:  
ERROR: Re-run SonarScanner using the -X switch to enable full debug logging. 
[Pipeline] } 
WARN: Unable to locate 'report-task.txt' in the workspace. Did the SonarScanner succeed?

ALB配置截图 #

• ALB监听器概览：
• 443端口监听器详情：
• 80端口监听器详情：
• 安全组配置：
• 目标组配置：

内容的提问来源于stack exchange，提问作者Андрей Белый