Hawkular metrics pod fails to start due to: Failed to import the authority from 'kubernetes-cas-to-import01' into the trust store
Issue
The Hawkular metrics pod fails to start due to the following error reported by oc logs
:
Warning:
The JKS keystore uses a proprietary format. It is recommended to migrate to PKCS12 which is an industry standard format using "keytool -importkeystore -srckeystore /opt/hawkular/auth/hawkular-metrics.keystore -destkeystore /opt/hawkular/auth/hawkular-metrics.keystore -deststoretype pkcs12".
Building the trust store
Picked up JAVA_TOOL_OPTIONS: -Duser.home=/home/jboss -Duser.name=jboss
Certificate was added to keystore
Picked up JAVA_TOOL_OPTIONS: -Duser.home=/home/jboss -Duser.name=jboss
Certificate was added to keystore
Splitting up the Kubernetes CA into individual certificates
Adding the Kubernetes CAs into the trust store
Picked up JAVA_TOOL_OPTIONS: -Duser.home=/home/jboss -Duser.name=jboss
Certificate was added to keystore
Picked up JAVA_TOOL_OPTIONS: -Duser.home=/home/jboss -Duser.name=jboss
keytool error: java.lang.Exception: Input not an X.509 certificate
Failed to import the authority from 'kubernetes-cas-to-import01' into the trust store. Aborting.
Environment
- Red Hat OpenShift Container Platform 3.x
- Hawkular Metrics
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.