Hawkular metrics pod fails to start due to: Failed to import the authority from 'kubernetes-cas-to-import01' into the trust store

Solution Verified - Updated -

Issue

The Hawkular metrics pod fails to start due to the following error reported by oc logs:

Warning:
The JKS keystore uses a proprietary format. It is recommended to migrate to PKCS12 which is an industry standard format using "keytool -importkeystore -srckeystore /opt/hawkular/auth/hawkular-metrics.keystore -destkeystore /opt/hawkular/auth/hawkular-metrics.keystore -deststoretype pkcs12".
Building the trust store
Picked up JAVA_TOOL_OPTIONS: -Duser.home=/home/jboss -Duser.name=jboss
Certificate was added to keystore
Picked up JAVA_TOOL_OPTIONS: -Duser.home=/home/jboss -Duser.name=jboss
Certificate was added to keystore
Splitting up the Kubernetes CA into individual certificates
Adding the Kubernetes CAs into the trust store
Picked up JAVA_TOOL_OPTIONS: -Duser.home=/home/jboss -Duser.name=jboss
Certificate was added to keystore
Picked up JAVA_TOOL_OPTIONS: -Duser.home=/home/jboss -Duser.name=jboss
keytool error: java.lang.Exception: Input not an X.509 certificate
Failed to import the authority from 'kubernetes-cas-to-import01' into the trust store. Aborting.

Environment

  • Red Hat OpenShift Container Platform 3.x
  • Hawkular Metrics

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content