Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-44235

When configuring CA certificates to HelmChartRepository or ProjectHelmChartRepository, the charts installation breaks down

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Normal Normal
    • None
    • 4.14, 4.15, 4.16
    • Helm
    • Quality / Stability / Reliability
    • False
    • Hide

      None

      Show
      None
    • None
    • None
    • None
    • None
    • None
    • Rejected
    • Helm Sprint 2, Helm Sprint 3
    • 2
    • None
    • None
    • None
    • None
    • None
    • None
    • None

      Description of problem:

      When configuring CA certificates to HelmChartRepository or ProjectHelmChartRepository, the charts installation breaks with error:
      ~~~
      The Helm Chart is currently unavailable. r: Failed to retrieve chart: error locating chart: looks like <CHART> is not a valid chart repository or cannot be reached: open /.cache/helm/repository/7SBgIZuloO16-c-1e4w-aDA1c0I=-index.yaml: no such file or directory
      ~~~

      Version-Release number of selected component (if applicable):

      Verified on OCP 4.14 and 4.15

      How reproducible:

      Always

      Steps to Reproduce:

      1. Go to OCP console > Developer view > Helm > Browse the catalog to discover available Helm Charts
      2. Select any Chart (e.g. ".NET Application") and select "Create"
      3. Note that the installer properly works
      4. Create a new configmap with the certificate of openshift.io:
             ~~~
             $ vi openshift-io.crt       
             
             -----BEGIN CERTIFICATE-----
             MIIE+DCCA+CgAwIBAgISBFRwCtid6L+QgrIjrTC4KN4WMA0GCSqGSIb3DQEBCwUA
             MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
             EwNSMTAwHhcNMjQxMTA1MDczNjE4WhcNMjUwMjAzMDczNjE3WjAeMRwwGgYDVQQD
             ExNjaGFydHMub3BlbnNoaWZ0LmlvMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
             CgKCAQEAmJhY6+zLtneB6HAOhyIx79JjY2cBnJBOEBaUnPUZtgUwVraCQWLUMQt5
             wNThwTYTH1xwFiHQHFMTjDwMjF0VR/jHlClBj8Ljsim2G3eNqHPq2GORN9ImUGGh
             BL36diIGpaA93AdLj7cGJLYXki7JrtwWLCzDbJQjLZ+d1EDamCY9Z4c3tkyko+5S
             MeOHLO047nCltZh9w4eW+y5FbKJsJP9jQrbkfNRfa5ZzJHoMpYlohvFxA3lTDogc
             blql8IAMZg2koiC1uQkcADWPPImnioxOV/0eKBk6Y9BWA+n1Mg03QD+akHEz19e0
             fkFItAWqjvdlNoeHZsr/bYND70isjQIDAQABo4ICGTCCAhUwDgYDVR0PAQH/BAQD
             AgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAA
             MB0GA1UdDgQWBBRYybKqaOalSMzYK+hCsr9/vkVmaDAfBgNVHSMEGDAWgBS7vMNH
             peS8qcbDpHIMEI2iNeHI6DBXBggrBgEFBQcBAQRLMEkwIgYIKwYBBQUHMAGGFmh0
             dHA6Ly9yMTAuby5sZW5jci5vcmcwIwYIKwYBBQUHMAKGF2h0dHA6Ly9yMTAuaS5s
             ZW5jci5vcmcvMB4GA1UdEQQXMBWCE2NoYXJ0cy5vcGVuc2hpZnQuaW8wEwYDVR0g
             BAwwCjAIBgZngQwBAgEwggEGBgorBgEEAdZ5AgQCBIH3BIH0APIAdwDPEVbu1S58
             r/OHW9lpLpvpGnFnSrAX7KwB0lt3zsw7CAAAAZL7dlNOAAAEAwBIMEYCIQCJ/iq+
             /H53z4/O/swmV9LXojhAap8csqJZJHMXFrpxNAIhAKNBlQYHKaTbYo6i5zdZqkeT
             E68GpnCXl6XrFsdoALpLAHcA4JKz/AwdyOdoNh/eYbmWTQpSeBmKctZyxLBNpW1v
             VAQAAAGS+3ZTHgAABAMASDBGAiEAvEEI90A/KJ2LAvpIj3AP0Ibz1iPLHqdETyO8
             limdxigCIQC5I/Vz5E35lNfsoAhKi65eCPmdEp0kWm1NkfOj65vxOzANBgkqhkiG
             9w0BAQsFAAOCAQEAY6FtuDIu6FTu+uI7idODy2v7EeceadWyugHTfr+1OZTFFTts
             JXfEX528LrQUAjNraZdkY9MC4r0eAa6vDE8eGYDAGfe4u6gm5wwDMaSUaVCnSvz0
             k7vtOrx7X2mAsTLS2yBXcJRQUXQpWdxWshY9X54UIVvvwDHaf+X47hz01hIWjevl
             WihqpKVX6inU0AfaqXTLNE784AuudMaPSZEiXW717giDQ0hLi3nVlnIDOVAe/2kz
             P0RyX04EnQf88681+TjmyIcMvk7I7B0lgLI/mwsXVl83Sv/bWflrJ1cEczgwzVwp
             pYqGhO0c+ATOh4pvpQfBsKEbw5DFMSEmyXKHkg==
             -----END CERTIFICATE-----
             -----BEGIN CERTIFICATE-----
             MIIFBTCCAu2gAwIBAgIQS6hSk/eaL6JzBkuoBI110DANBgkqhkiG9w0BAQsFADBP
             MQswCQYDVQQGEwJVUzEpMCcGA1UEChMgSW50ZXJuZXQgU2VjdXJpdHkgUmVzZWFy
             Y2ggR3JvdXAxFTATBgNVBAMTDElTUkcgUm9vdCBYMTAeFw0yNDAzMTMwMDAwMDBa
             Fw0yNzAzMTIyMzU5NTlaMDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBF
             bmNyeXB0MQwwCgYDVQQDEwNSMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
             AoIBAQDPV+XmxFQS7bRH/sknWHZGUCiMHT6I3wWd1bUYKb3dtVq/+vbOo76vACFL
             YlpaPAEvxVgD9on/jhFD68G14BQHlo9vH9fnuoE5CXVlt8KvGFs3Jijno/QHK20a
             /6tYvJWuQP/py1fEtVt/eA0YYbwX51TGu0mRzW4Y0YCF7qZlNrx06rxQTOr8IfM4
             FpOUurDTazgGzRYSespSdcitdrLCnF2YRVxvYXvGLe48E1KGAdlX5jgc3421H5KR
             mudKHMxFqHJV8LDmowfs/acbZp4/SItxhHFYyTr6717yW0QrPHTnj7JHwQdqzZq3
             DZb3EoEmUVQK7GH29/Xi8orIlQ2NAgMBAAGjgfgwgfUwDgYDVR0PAQH/BAQDAgGG
             MB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATASBgNVHRMBAf8ECDAGAQH/
             AgEAMB0GA1UdDgQWBBS7vMNHpeS8qcbDpHIMEI2iNeHI6DAfBgNVHSMEGDAWgBR5
             tFnme7bl5AFzgAiIyBpY9umbbjAyBggrBgEFBQcBAQQmMCQwIgYIKwYBBQUHMAKG
             Fmh0dHA6Ly94MS5pLmxlbmNyLm9yZy8wEwYDVR0gBAwwCjAIBgZngQwBAgEwJwYD
             VR0fBCAwHjAcoBqgGIYWaHR0cDovL3gxLmMubGVuY3Iub3JnLzANBgkqhkiG9w0B
             AQsFAAOCAgEAkrHnQTfreZ2B5s3iJeE6IOmQRJWjgVzPw139vaBw1bGWKCIL0vIo
             zwzn1OZDjCQiHcFCktEJr59L9MhwTyAWsVrdAfYf+B9haxQnsHKNY67u4s5Lzzfd
             u6PUzeetUK29v+PsPmI2cJkxp+iN3epi4hKu9ZzUPSwMqtCceb7qPVxEbpYxY1p9
             1n5PJKBLBX9eb9LU6l8zSxPWV7bK3lG4XaMJgnT9x3ies7msFtpKK5bDtotij/l0
             GaKeA97pb5uwD9KgWvaFXMIEt8jVTjLEvwRdvCn294GPDF08U8lAkIv7tghluaQh
             1QnlE4SEN4LOECj8dsIGJXpGUk3aU3KkJz9icKy+aUgA+2cP21uh6NcDIS3XyfaZ
             QjmDQ993ChII8SXWupQZVBiIpcWO4RqZk3lr7Bz5MUCwzDIA359e57SSq5CCkY0N
             4B6Vulk7LktfwrdGNVI5BsC9qqxSwSKgRJeZ9wygIaehbHFHFhcBaMDKpiZlBHyz
             rsnnlFXCb5s8HKn5LsUgGvB24L7sGNZP2CX7dhHov+YhD+jozLW2p9W4959Bz2Ei
             RmqDtmiXLnzqTpXbI+suyCsohKRg6Un0RC47+cpiVwHiXZAW+cn8eiNIjqbVgXLx
             KPpdzvvtTnOPlC7SQZSYmdunr3Bf9b77AiC/ZidstK36dRILKz7OA54=
             -----END CERTIFICATE-----
             ~~~       
      
             ~~~
             $ oc create configmap openshift-io-certs --from-file=ca-bundle.crt=openshift-io.crt -n openshift-config
             ~~~
      4. Reference the new configmap to `openshift-helm-charts` HelmChartRepository ca parameter:
             ~~~
             ca:
               name: openshift-io-certs
             ~~~
      5. Back to Helm > Browse the catalog to discover available Helm Charts
      6. Select again the ".NET Application" chart and then "Create"

      Actual results:

      The console returns the error:
         ~~~
         Helm Chart cannot be installed
         The Helm Chart is currently unavailable. r: Failed to retrieve chart: error locating chart: looks like "https://charts.openshift.io" is not a valid chart repository or cannot be reached: open /.cache/helm/repository/0V0aN-hX+Ov86TysGXxzemjBVCc=-index.yaml: no such file or directory
         ~~~

      Expected results:

      The chart installation properly works.

              bmuthuka Baiju Muthukadan
              rhn-support-dcommiss Domenico Commisso
              None
              None
              None
              None
              Votes:
              1 Vote for this issue
              Watchers:
              10 Start watching this issue

                Created:
                Updated: