Uploaded image for project: 'OpenShift Service Mesh'
  1. OpenShift Service Mesh
  2. OSSM-214

Kiali failing on OCP 4.5-RC1 with failed to get root CA certificates

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Major Major
    • OSSM 2.0.0
    • OSSM 1.1.2
    • Kiali, Maistra
    • None

      Using the latest nightly build of OCP 4.5 (4.5.0-0.nightly-2020-06-05-214616) the kiali login fails with:

      {"error":"Error authenticating (getting business layer)","detail":"failed to get root CA certificates: open /var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt: no such file or directory"}

      also jaeger-query pod is not started with following error in log:

      {"level":"fatal","ts":1591779135.5996642,"caller":"agent/main.go:62","msg":"Could not create collector proxy","error":"failed to load TLS config: failed to load CA CertPool: failed to load CA /var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt: open /var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt: no such file or directory","stacktrace":"main.main.func1\n\t/go/src/github.com/jaegertracing/jaeger/cmd/agent/main.go:62\ngithub.com/jaegertracing/jaeger/vendor/github.com/spf13/cobra.(*Command).execute\n\t/go/src/github.com/jaegertracing/jaeger/vendor/github.com/spf13/cobra/command.go:762\ngithub.com/jaegertracing/jaeger/vendor/github.com/spf13/cobra.(*Command).ExecuteC\n\t/go/src/github.com/jaegertracing/jaeger/vendor/github.com/spf13/cobra/command.go:852\ngithub.com/jaegertracing/jaeger/vendor/github.com/spf13/cobra.(*Command).Execute\n\t/go/src/github.com/jaegertracing/jaeger/vendor/github.com/spf13/cobra/command.go:800\nmain.main\n\t/go/src/github.com/jaegertracing/jaeger/cmd/agent/main.go:98\nruntime.main\n\t/opt/rh/go-toolset-1.13/root/usr/lib/go-toolset-1.13-golang/src/runtime/proc.go:203"}

       

       

      Issue might be caused by OCP 4.5 bug, it's not visible on OCP 4.4.

       

       

       

       

        1. kiali-error-login.png
          178 kB
          Guilherme Baufaker Rego

              kconner@redhat.com Kevin Conner (Inactive)
              fbrychta@redhat.com Filip Brychta
              Saturn
              Votes:
              0 Vote for this issue
              Watchers:
              10 Start watching this issue

                Created:
                Updated:
                Resolved: