Red Hat OpenShift 4 IPI installation on OpenStack fails with error "ignition ... GET error ... x509: certificate signed by unknown authority"

Solution Verified - Updated -

Issue

  • OpenStack endpoints use a custom PKI or self signed certificate
  • Ignition reports (OpenShift 4.2)

    [80558.038518] ignition[666]: GET error: Get https://openstack-controller.example.intern:13808/v1/AUTH_xxxxxxxxxxxxxxxxxxxxxx/xxxx-xxxx/bootstrap.ign?temp_url_sig=xxxxxxxxxxxxxxxxxxxxxxxxxxx&temp_url_expires=xxxxxxxxxxxx: x509: certificate signed by unknown authority
    
  • Ignition reports (OpenShift 4.3)

    [   31.816448] ignition[1112]: GET error: Get https://openstack-controller.example.intern:13808/v1/AUTH_xxxxxxxxxxxxxxxxxxxxxx/xxxx-xxxx/abcabc152514abcbabc: x509: certificate signed by unknown authority
    

Environment

  • Red Hat OpenShift Container Platform
    • 4.2
    • <4.3.2
  • Red Hat OpenStack Platform 13

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.

Current Customers and Partners

Log in for full access

Log In