Uploaded image for project: 'OpenShift Hive'
  1. OpenShift Hive
  2. HIVE-3074

ACM fails cluster creation due to untrusted vCenter CA despite providing certs in Secret”

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Normal Normal
    • None
    • None
    • None
    • None
    • False
    • Hide

      None

      Show
      None
    • None
    • Low
    • None
    • None
    • None
    • None
    • None
    • None

      When creating a managed cluster on vSphere using ACM, if fails with the certificate error. I am using the same CA certs downloaded from the vCenter and using it when the creating the credentials. I am able to use those certs to create an IPI based installation but using with ACM always fails! I can see the secrets created in the cluster namespace but still fails as below,
       
      Platform credentials failed authentication check: Post "https://vcsnsx-vc.infra.demo.redhat.com/sdk": tls: failed to verify certificate: x509: certificate signed by unknown authority
       
      Discussion with the engineering team is here https://redhat-internal.slack.com/archives/CE3ETN3J8/p1770908512004219
       
      After trying various things, we could make it work by appending the contents of ca-bundle.crt from hive-trusted-cabundle to vCenter CA (Note that this has to be done before creating the cluster but when creating the credential) 

              efried.openshift Eric Fried
              rh-ee-prajendr Prakash Rajendran
              None
              None
              None
              None
              None
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated: