Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-22487

certificate signed by unknown authority while uninstalling operators from console.

    XMLWordPrintable

Details

    • Bug
    • Resolution: Unresolved
    • Major
    • 4.16.0
    • 4.13
    • Management Console
    • None
    • No
    • False
    • Hide

      None

      Show
      None
    • The console backend was proxying operand list requests to the public API server endpoint, which caused CA cert issues under some circumstances. The proxy configuration was updated to point to the internal API server endpoint which fixed this issue.
    • Bug Fix
    • In Progress
    • Customer Escalated

    Description

      Description of problem:

      

      


      The customer has a custom apiserver certificate.
      


      This error can be found while trying to uninstall any operator by console:
      


      openshift-console/pods/console-56494b7977-d7r76/console/console/logs/current.log:
      


      2023-10-24T14:13:21.797447921+07:00 E1024 07:13:21.797400       1 operands_handler.go:67] Failed to get new client for listing operands: Get "https://api.<cluster>.<domain>:6443/api?timeout=32s": x509: certificate signed by unknown authority
      


      when trying the same request from the console pod we can see no issue.
      


      We see the root ca that signs apiserver certificate and this CA is trusted in the pod.
      


      It seems the code that provokes this issue is:
      


      https://github.com/openshift/console/blob/master/pkg/server/operands_handler.go#L62-L70
      

            
      

      

      Attachments
        Issue Links
          







          
                
          
            
          blocks
          
                            
          
                    
          
                                                    




          
            Bug - A problem that impairs or prevents the functions of the product.
        
        OCPBUGS-30007
        certificate signed by unknown authority while uninstalling operators from console.
    

          

            
        
          •         Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
    
            • 
                
          • 
                        Closed
                    
            • 
    
          
                                            
          
                                    
          
                    
          
            
          
            
          is cloned by
          
                            
          
                    
          
                                                    




          
            Bug - A problem that impairs or prevents the functions of the product.
        
        OCPBUGS-29781
        [release-4.15] certificate signed by unknown authority while uninstalling operators from console.
    

          

            
        
          •         Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
    
            • 
                
          • 
                        Closed
                    
            • 
    
          
                                            
          
                                    
          
                            
          
                    
          
                                                    




          
            Bug - A problem that impairs or prevents the functions of the product.
        
        OCPBUGS-30007
        certificate signed by unknown authority while uninstalling operators from console.
    

          

            
        
          •         Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
    
            • 
                
          • 
                        Closed
                    
            • 
    
          
                                            
          
                                    
          
                    
          
            
          
            
          is depended on by
          
                            
          
                    
          
                                                    




          
            Bug - A problem that impairs or prevents the functions of the product.
        
        OCPBUGS-29781
        [release-4.15] certificate signed by unknown authority while uninstalling operators from console.
    

          

            
        
          •         Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
    
            • 
                
          • 
                        Closed
                    
            • 
    
          
                                            
          
                                    
          
                    
          
            
          
            
          links to
          
                            
          
                    
          
                                                














          
            Web Link
        
        https://github.com/openshift/console/pull/13276
        
    

          

            
    
          

                                        
          
                                    
          
                            
          
                    
          
                                                














          
            GitHub
        
        openshift/console#13632: OCPBUGS-22487: Fix operands list endpoint.
        
    

          

            
    
          

                                        
          
                                    
          
                            
          
                    
          
                                                














          
            Web Link
        
        RHEA-2024:0041
        OpenShift Container Platform 4.16.z bug fix update
    

          

            
    
          

                                        
          
                                    
          
                    
          
                
    
          

          Activity
            


            

            People
              






              
                        

              
    
              
        
    
              
    
              
        

            
            



    
    rh-ee-jonjacks
            Jon Jackson
            
        
    
            
              

                                              

              
    
              
        
    
              
    
              
        

            
            



    
    rhn-support-gparente
            German Parente
            
        
    
    
              

                                          
              
        
              
            
        
              
        
              
            
                                                Yanping Zhang
                Yanping Zhang
    
                            
        
              
    
              
    
              
    
              
                        
              
        
              Votes:
              
        
              
                                2
            
                                                Vote for this issue
                    
              
    
              
                            
              
        
              Watchers:
              
        
              
                                
                                
                            11
            
                                        Start watching this issue
                    
              
    
              
        
              

              Dates
                

                
            
                
            
                
                                    Created:
                            
                
            
                
                
                                                                                                                                                                                                 
            
                
        
                
            
                
            
                
                                    Updated: