Uploaded image for project: 'OpenShift GitOps'
  1. OpenShift GitOps
  2. GITOPS-8971

Adding a CA certificate via proxy configuration in the cluster but getting an error when connecting a repository to ArgoCD.

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Not a Bug
    • Icon: Critical Critical
    • None
    • 1.19.0
    • Operator
    • 2
    • False
    • Hide

      None

      Show
      None
    • False
    • GitOps Tangerine Sprint 28

      Problem

      Customer is facing  "[failed to verify certificate: x509: certificate signed by unknown authority]" error while connecting to bit bucket repository.

      Workaround:

      To check --> tls: true while connecting repository from ArgoCD.

      Description of Problem

      [Version Details]

       -  openshift-gitops-operator.v1.19.0

       -  Cluster version details: version  4.18.22  **

      One of our customers is reporting an issue while trying to connect a Bitbucket repository through the Argo CD UI. The connection is failing during this process, and they are encountering an error."[failed to verify certificate: x509: certificate signed by unknown authority]"

      It appears that when the "tls-verify" box or option is selected, the connection is established successfully.

      They are using proxy and we suggested them:
      Add Proxy's CA certificate to ArgoCD Trust store via the GUI, by navigating to Settings---> Repository Certificates and known hosts. Please let us know if post that the repositories can be connected successfully.

      Still, they are facing same issue.

      As per  Cheng Fang  suggestions, we suggested them but we did not recieve any possitive response from them.
      [ upstream argocd docs]https://argo-cd.readthedocs.io/en/stable/operator-manual/declarative-setup/#repositories-using-self-signed-tls-certificates-or-are-signed-by-custom-ca 
       
      [KCS] https://access.redhat.com/solutions/7000863 , which has info how to pass the configmap to GitOps ArgoCD CR.

              ogondza@redhat.com Oliver Gondza
              rhn-support-saahamad Sarfaraz Ahamad
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Created:
                Updated:
                Resolved: