Hawkular Metrics pod unable to start due to Java Keytool Error

Solution Unverified - Updated -

Issue

  • After enabling the OCP cluster metrics, the hawkular-metrics pod will not start due to the following error:

        # oc logs hawkular-metrics-<id>
    
        2018-12-06 11:22:28 Starting Hawkular Metrics
        The service account has read permissions for its project. Proceeding
        The service account has permission to watch namespaces. Proceeding
        Creating the Hawkular Metrics keystore from the Secret's cert data
        Converting the PKCS12 keystore into a Java Keystore
        Importing keystore /opt/hawkular/auth/hawkular-metrics.pkcs12 to /opt/hawkular/auth/hawkular-metrics.keystore...
        keytool error: java.io.IOException: parseAlgParameters failed: PBE AlgorithmParameters not available
        java.io.IOException: parseAlgParameters failed: PBE AlgorithmParameters not available
                at sun.security.pkcs12.PKCS12KeyStore.parseAlgParameters(PKCS12KeyStore.java:816)
                at sun.security.pkcs12.PKCS12KeyStore.engineLoad(PKCS12KeyStore.java:2018)
                at java.security.KeyStore.load(KeyStore.java:1445)
                at sun.security.tools.keytool.Main.loadSourceKeyStore(Main.java:2044)
                at sun.security.tools.keytool.Main.doCommands(Main.java:1071)
                at sun.security.tools.keytool.Main.run(Main.java:368)
                at sun.security.tools.keytool.Main.main(Main.java:361)
        Caused by: java.security.NoSuchAlgorithmException: PBE AlgorithmParameters not available
                at sun.security.jca.GetInstance.getInstance(GetInstance.java:159)
                at java.security.Security.getImpl(Security.java:695)
                at java.security.AlgorithmParameters.getInstance(AlgorithmParameters.java:146)
                at sun.security.pkcs12.PKCS12KeyStore.parseAlgParameters(PKCS12KeyStore.java:810)
                ... 6 more
        Failed to create a Java Keystore file with the service-specific certificate. Aborting.
    

Environment

  • Red Hat OpenShift Container Platform (OCP)
    • 3.9
    • 3.10
    • 3.11

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content