RHACS Collector failing with error "Fail to download /module... x509: certificate signed by unknown authority"

Solution Verified - Updated -

Issue

  • The collector pods are crashing because they don't have the required Kernel module to function
  • Please note, that the Collector Version and Kernel module described below can vary from cluster to cluster depending on the underlying Kernel, RHACS release andcollection_method:Kernel,eBPF,no_collection set in the secured cluster.
Collector Version: 3.6.0
Hostname: collector-jf6sg
OS: OpenShift Enterprise
Kernel Version: 3.10.0-1160.59.1.el7.x86_64
Starting StackRox Collector...
[I 20220321 194137 CollectorConfig.cpp:138] User configured collection-method=kernel_module
[I 20220321 194137 collector.cpp:318] Attempting to download kernel module - Candidate kernel versions:
[I 20220321 194137 collector.cpp:320] 3.10.0-1160.59.1.el7.x86_64
[I 20220321 194137 GetKernelObject.cpp:195] Local storage does not contain collector-3.10.0-1160.59.1.el7.x86_64.ko
[I 20220321 194137 FileDownloader.cpp:316] Fail to download /module/collector.ko.gz - Failed writing body (0 != 203)
[I 20220321 194137 FileDownloader.cpp:318] HTTP Request failed with error code '500' - HTTP Body Response: making upstream request: Get "/kernel-objects/b6745d795b8497aaf387843dc8aa07463c944d3ad67288389b754daaebea4b62/collector-3.10.0-1160.59.1.el7.x86_64.ko.gz": x509: certificate signed by unknown authority
...
pkg/probeupload: 2022/03/21 19:41:52.697457 server_handler.go:91: Error: error loading probe b6745d795b8497aaf387843dc8aa07463c944d3ad67288389b754daaebea4b62/collector-3.10.0-1160.59.1.el7.x86_64.ko.gz: making upstream request: Get "/kernel-objects/b6745d795b8497aaf387843dc8aa07463c944d3ad67288389b754daaebea4b62/collector-3.10.0-1160.59.1.el7.x86_64.ko.gz": x509: certificate signed by unknown authority

Environment

  • Red Hat Advance Cluster Security for Kubernetes
    • OpenShift 3.11, 4.x
    • RHACS 3.x

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content