Uploaded image for project: 'Maistra'
  1. Maistra
  2. MAISTRA-2040

Installation fails with 'certificate signed by unknown authority'

    XMLWordPrintable

Details

    • Bug
    • Resolution: Done
    • Blocker
    • maistra-2.0.1
    • maistra-2.0.1
    • None
    • None
    • MAISTRA 2.0.1

    Description

      I'm installing the latest nightly build from "quay.io/maistra/servicemesh-olm-cs:latest-2.0-qe" catalog.

      Currently it's installing following operator:

      "quay.io/maistra/istio-rhel8-operator@sha256:4959421d38132e5ebe07202af74ff81d079bd62247dce234e367ffaeb1c192b7"

       

      Repro steps:

      1. install OCP 4.5 cluster
      2. add catalog source pointing to "quay.io/maistra/servicemesh-olm-cs:latest-2.0-qe" image
      3. create istio-system NS and install operator from created catalog source
      4. create following SMCP in istio-system NS
      apiVersion: maistra.io/v2
      kind: ServiceMeshControlPlane
      metadata:
        name: install-istio-system
      spec:
        version: v2.0
        security:
          dataPlane:
            mtls: true
            automtls: true
          controlPlane:
            mtls: true
        tracing:
          type: None
        addons:
          kiali:
            name: kiali
            enabled: false
      

       

      Result:

      ReconcileError
      Error processing component mesh-config: Internal error occurred: failed calling webhook "validation.istio.io": Post https://istiod-install-istio-system.istio-system.svc:443/validate?timeout=30s: x509: certificate signed by unknown authority: error: Internal error occurred: failed calling webhook "validation.istio.io": Post https://istiod-install-istio-system.istio-system.svc:443/validate?timeout=30s: x509: certificate signed by unknown authority

       

      Istio operator log is attached

      Attachments

        Issue Links

          Activity

            People

              rcernich1 Rob Cernich
              fbrychta@redhat.com Filip Brychta
              Votes:
              0 Vote for this issue
              Watchers:
              7 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: