RHACS Collector failing with error "Fail to download /module... x509: certificate signed by unknown authority"
Issue
- The
collector
pods are crashing because they don't have the required Kernel module to function - Please note, that the
Collector Version
andKernel module
described below can vary from cluster to cluster depending on the underlying Kernel, RHACS release andcollection_method
:Kernel
,eBPF
,no_collection
set in the secured cluster.
Collector Version: 3.6.0
Hostname: collector-jf6sg
OS: OpenShift Enterprise
Kernel Version: 3.10.0-1160.59.1.el7.x86_64
Starting StackRox Collector...
[I 20220321 194137 CollectorConfig.cpp:138] User configured collection-method=kernel_module
[I 20220321 194137 collector.cpp:318] Attempting to download kernel module - Candidate kernel versions:
[I 20220321 194137 collector.cpp:320] 3.10.0-1160.59.1.el7.x86_64
[I 20220321 194137 GetKernelObject.cpp:195] Local storage does not contain collector-3.10.0-1160.59.1.el7.x86_64.ko
[I 20220321 194137 FileDownloader.cpp:316] Fail to download /module/collector.ko.gz - Failed writing body (0 != 203)
[I 20220321 194137 FileDownloader.cpp:318] HTTP Request failed with error code '500' - HTTP Body Response: making upstream request: Get "/kernel-objects/b6745d795b8497aaf387843dc8aa07463c944d3ad67288389b754daaebea4b62/collector-3.10.0-1160.59.1.el7.x86_64.ko.gz": x509: certificate signed by unknown authority
...
pkg/probeupload: 2022/03/21 19:41:52.697457 server_handler.go:91: Error: error loading probe b6745d795b8497aaf387843dc8aa07463c944d3ad67288389b754daaebea4b62/collector-3.10.0-1160.59.1.el7.x86_64.ko.gz: making upstream request: Get "/kernel-objects/b6745d795b8497aaf387843dc8aa07463c944d3ad67288389b754daaebea4b62/collector-3.10.0-1160.59.1.el7.x86_64.ko.gz": x509: certificate signed by unknown authority
Environment
- Red Hat Advance Cluster Security for Kubernetes
- OpenShift 3.11, 4.x
- RHACS 3.x
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.