Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-30007

certificate signed by unknown authority while uninstalling operators from console.

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Duplicate
    • Icon: Major Major
    • None
    • 4.13
    • Management Console
    • None
    • No
    • False
    • Hide

      None

      Show
      None

      This is a clone of issue OCPBUGS-22487. The following is the description of the original issue:

      Description of problem:

      
      

      The customer has a custom apiserver certificate.

      This error can be found while trying to uninstall any operator by console:

      openshift-console/pods/console-56494b7977-d7r76/console/console/logs/current.log:

      2023-10-24T14:13:21.797447921+07:00 E1024 07:13:21.797400 1 operands_handler.go:67] Failed to get new client for listing operands: Get "https://api.<cluster>.<domain>:6443/api?timeout=32s": x509: certificate signed by unknown authority

      when trying the same request from the console pod we can see no issue.

      We see the root ca that signs apiserver certificate and this CA is trusted in the pod.

      It seems the code that provokes this issue is:

      https://github.com/openshift/console/blob/master/pkg/server/operands_handler.go#L62-L70

              rh-ee-jonjacks Jon Jackson
              openshift-crt-jira-prow OpenShift Prow Bot
              YaDan Pei YaDan Pei
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

                Created:
                Updated:
                Resolved: