Hawkular metrics pod fails to start due to: Failed to import the authority from 'kubernetes-cas-to-import01' into the trust store
Issue
The Hawkular metrics pod fails to start due to the following error reported by oc logs:
Warning:
The JKS keystore uses a proprietary format. It is recommended to migrate to PKCS12 which is an industry standard format using "keytool -importkeystore -srckeystore /opt/hawkular/auth/hawkular-metrics.keystore -destkeystore /opt/hawkular/auth/hawkular-metrics.keystore -deststoretype pkcs12".
Building the trust store
Picked up JAVA_TOOL_OPTIONS: -Duser.home=/home/jboss -Duser.name=jboss
Certificate was added to keystore
Picked up JAVA_TOOL_OPTIONS: -Duser.home=/home/jboss -Duser.name=jboss
Certificate was added to keystore
Splitting up the Kubernetes CA into individual certificates
Adding the Kubernetes CAs into the trust store
Picked up JAVA_TOOL_OPTIONS: -Duser.home=/home/jboss -Duser.name=jboss
Certificate was added to keystore
Picked up JAVA_TOOL_OPTIONS: -Duser.home=/home/jboss -Duser.name=jboss
keytool error: java.lang.Exception: Input not an X.509 certificate
Failed to import the authority from 'kubernetes-cas-to-import01' into the trust store. Aborting.
Environment
- Red Hat OpenShift Container Platform 3.x
- Hawkular Metrics
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.
Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.
