Uploaded image for project: 'Red Hat OpenShift Dev Spaces (formerly CodeReady Workspaces) '
  1. Red Hat OpenShift Dev Spaces (formerly CodeReady Workspaces)
  2. CRW-2200

Starting a devfile v2 based workspace fails when plugin registry uses an untrusted TLS certificate

XMLWordPrintable

    • False
    • False
    • = TODO
    • Hide

      Env.: OCP 4.8, 4.6, cluster-bot

      Preconditions: 

      Launch the OCP 4.8 or 4.6 with enabled workspace-engine properly mirroring and install CRW using  crwctl command. For example:

      ./crwctl server:deploy --no-olm-suggested-namespace --catalog-source-name=osbs-catalog-source --catalog-source-namespace=openshift-marketplace --package-manifest-name=codeready-workspaces --olm-channel=latest -n crw-dev-ws --che-operator-cr-patch-yaml=/tmp/che-cr-patch.yaml --workspace-engine=dev-workspace
      
      • After installing go to the CRW dashboard and try to launch the Quarkus sample.

      Expected result: The Workspace should be created and launched
      Actual result: Workspace quarkus failed to start. Init Container vsix-installer has state CrashLoopBackOff

      Additional info: If we go into the workspace Pod and we logs of the vsix-installer container we got error like:

      downloading "relative:extension/resources/download_jboss_org/jbosstools/static/jdt_ls/stable/java-0.75.0-60.vsix","relative:extension/resources/download_jboss_org/jbosstools/vscode/3rdparty/vscode-java-debug/vscode-java-debug-0.26.0.vsix" to /plugins/sidecars/vscode-java
        % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                       Dload  Upload   Total   Spent    Left  Speed
        0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
        0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
      curl: (60) SSL certificate problem: self signed certificate in certificate chain
      More details here: https://curl.se/docs/sslcerts.html
      curl failed to verify the legitimacy of the server and therefore could not
      establish a secure connection to it. To learn more about this situation and
      how to fix it, please visit the web page mentioned above.
      downloading "relative:extension/resources/download_jboss_org/jbosstools/static/jdt_ls/stable/java-0.75.0-60.vsix","relative:extension/resources/download_jboss_org/jbosstools/vscode/3rdparty/vscode-java-debug/vscode-java-debug-0.26.0.vsix" to /plugins/sidecars/vscode-java
        % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                       Dload  Upload   Total   Spent    Left  Speed
        0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
        0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
      curl: (60) SSL certificate problem: self signed certificate in certificate chain
      More details here: https://curl.se/docs/sslcerts.html
      curl failed to verify the legitimacy of the server and therefore could not
      establish a secure connection to it. To learn more about this situation and
      how to fix it, please visit the web page mentioned above.
      
      Show
      Env.: OCP 4.8, 4.6, cluster-bot Preconditions:   Launch the OCP 4.8 or 4.6 with enabled workspace-engine properly mirroring and install CRW using  crwctl command. For example: ./crwctl server:deploy --no-olm-suggested-namespace --catalog-source-name=osbs-catalog-source --catalog-source-namespace=openshift-marketplace --package-manifest-name=codeready-workspaces --olm-channel=latest -n crw-dev-ws --che-operator-cr-patch-yaml=/tmp/che-cr-patch.yaml --workspace-engine=dev-workspace After installing go to the CRW dashboard and try to launch the Quarkus sample. Expected result: The Workspace should be created and launched Actual result: Workspace quarkus failed to start. Init Container vsix-installer has state CrashLoopBackOff Additional info: If we go into the workspace Pod and we logs of the vsix-installer container we got error like: downloading "relative:extension/resources/download_jboss_org/jbosstools/static/jdt_ls/stable/java-0.75.0-60.vsix" , "relative:extension/resources/download_jboss_org/jbosstools/vscode/3rdparty/vscode-java-debug/vscode-java-debug-0.26.0.vsix" to /plugins/sidecars/vscode-java % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0 curl: (60) SSL certificate problem: self signed certificate in certificate chain More details here: https://curl.se/docs/sslcerts.html curl failed to verify the legitimacy of the server and therefore could not establish a secure connection to it. To learn more about this situation and how to fix it, please visit the web page mentioned above. downloading "relative:extension/resources/download_jboss_org/jbosstools/static/jdt_ls/stable/java-0.75.0-60.vsix" , "relative:extension/resources/download_jboss_org/jbosstools/vscode/3rdparty/vscode-java-debug/vscode-java-debug-0.26.0.vsix" to /plugins/sidecars/vscode-java % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0 curl: (60) SSL certificate problem: self signed certificate in certificate chain More details here: https://curl.se/docs/sslcerts.html curl failed to verify the legitimacy of the server and therefore could not establish a secure connection to it. To learn more about this situation and how to fix it, please visit the web page mentioned above.

      When we try to create Quarkus workspace for the samples it list it fails with CrashLoopBackOff err.

            mmusiien Maksym Musienko
            mmusiien Maksym Musienko
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

              Created:
              Updated:
              Resolved: