Hawkular Metrics pod unable to start due to Java Keytool Error
Issue
-
After enabling the OCP cluster metrics, the hawkular-metrics pod will not start due to the following error:
# oc logs hawkular-metrics-<id> 2018-12-06 11:22:28 Starting Hawkular Metrics The service account has read permissions for its project. Proceeding The service account has permission to watch namespaces. Proceeding Creating the Hawkular Metrics keystore from the Secret's cert data Converting the PKCS12 keystore into a Java Keystore Importing keystore /opt/hawkular/auth/hawkular-metrics.pkcs12 to /opt/hawkular/auth/hawkular-metrics.keystore... keytool error: java.io.IOException: parseAlgParameters failed: PBE AlgorithmParameters not available java.io.IOException: parseAlgParameters failed: PBE AlgorithmParameters not available at sun.security.pkcs12.PKCS12KeyStore.parseAlgParameters(PKCS12KeyStore.java:816) at sun.security.pkcs12.PKCS12KeyStore.engineLoad(PKCS12KeyStore.java:2018) at java.security.KeyStore.load(KeyStore.java:1445) at sun.security.tools.keytool.Main.loadSourceKeyStore(Main.java:2044) at sun.security.tools.keytool.Main.doCommands(Main.java:1071) at sun.security.tools.keytool.Main.run(Main.java:368) at sun.security.tools.keytool.Main.main(Main.java:361) Caused by: java.security.NoSuchAlgorithmException: PBE AlgorithmParameters not available at sun.security.jca.GetInstance.getInstance(GetInstance.java:159) at java.security.Security.getImpl(Security.java:695) at java.security.AlgorithmParameters.getInstance(AlgorithmParameters.java:146) at sun.security.pkcs12.PKCS12KeyStore.parseAlgParameters(PKCS12KeyStore.java:810) ... 6 more Failed to create a Java Keystore file with the service-specific certificate. Aborting.
Environment
- Red Hat OpenShift Container Platform (OCP)
- 3.9
- 3.10
- 3.11
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.