IBM Support

Error "x509: certificate signed by unknown authority" in installing Certificate manager "cpd-cli manage apply-cluster-components"

Troubleshooting


Problem

When we run the below command for installing Certificate manage and License Service, the error occurred and the installation failed.
Command:
# cpd-cli manage apply-cluster-components \
--release=${VERSION} \
--license_acceptance=true \
--cert_manager_ns=${PROJECT_CERT_MANAGER} \
--licensing_ns=${PROJECT_LICENSE_SERVICE}

Symptom

The following error message occurred:
fatal: [localhost]: FAILED! => {"attempts": 5, "changed": true, "cmd": "oc ibm-pak get ibm-cert-manager --version 4.0.0 --disable-top-level-images-mode\n", "delta": "0:00:00.155551", "end": "2023-08-09 05:06:12.313125", "msg": "non-zero return code", "rc": 1, "start": "2023-08-09 05:06:12.157574", "stderr": "[ERROR]: unable to obtain root index for'https://github.com/IBM/cloud-pak/raw/master/repo/case': \"A HTTP processing related error occurred while accessing CASE repo: Get \\\"https://raw.githubusercontent.com/IBM/cloudpak/master/repo/case/index.yaml\\\": x509: certificate signed by unknown authority\"\nError: Unable to obtain a valid CASE for the CASE name of \"ibm-cert-manager\" at repository \"https://github.com/IBM/cloud-pak/raw/master/repo/case\" with version \"4.0.0\".\nReview this additional debug information: \"Unable to find a valid CaseDescriptor in the provided repository [\\\"https://github.com/IBM/cloud-pak/raw/master/repo/case\\\" \\\"ibm-cert-manager\\\" \\\"4.0.0\\\"] (the repository does not exist or is unavailable,
the CASE name does not exist, or there is no CASE that matches the specified version constraint in this repository)\"", "stderr_lines": ["[ERROR]: unable to obtain root index for'https://github.com/IBM/cloud-pak/raw/master/repo/case': \"A HTTP processing related error occurred while accessing CASE repo: Get \\\"https://raw.githubusercontent.com/IBM/cloud-pak/master/repo/case/index.yaml\\\": x509: certificate signed by unknown authority\"", "Error: Unable to obtain a valid CASE for the CASE name of \"ibm-cert-manager\" at repository \"https://github.com/IBM/cloud-pak/raw/master/repo/case\" with version \"4.0.0\".", "Review this additional debug information: \"Unable to find a valid CaseDescriptor in the provided repository [\\\"https://github.com/IBM/cloud-pak/raw/master/repo/case\\\" \\\"ibm-cert-manager\\\" \\\"4.0.0\\\"] (the repository does not exist or is unavailable, the CASE name does not exist, or there is no CASE that matches the specified version constraint in this repository)\""], "stdout": "", "stdout_lines": []}
The error "x509: certificate signed by unknown authority" occurs in connecting "https://raw.githubusercontent.com".
 

Document Location

Worldwide

[{"Type":"MASTER","Line of Business":{"code":"LOB76","label":"Data Platform"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSHGYS","label":"IBM Cloud Pak for Data"},"ARM Category":[{"code":"a8m3p000000UoSGAA0","label":"Installation-\u003EInstall"}],"ARM Case Number":"TS013844529","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"}]

Log InLog in to view more of this document

This document has the abstract of a technical article that is available to authorized users once you have logged on. Please use Log in button above to access the full document. After log in, if you do not have the right authorization for this document, there will be instructions on what to do next.

Document Information

Modified date:
30 August 2023

UID

ibm17029973