Unable to install MTV(Migration Toolkit for Virtualization) with error "failed to call webhook: certificate signed by unknown authority"
Issue
- Installation/Upgrade of OpenShift MTV [Migration Toolkit for Virtualization] fails with the following message in the forklift-operator logs:
Failed to create object: b'{"kind":"Status","apiVersion":"v1","metadata":{},"status":"Failure","message":"Internal error occurred: failed calling webhook \\"providers.forklift.konveyor\\": failed to call webhook: Post \\"https://forklift-api.openshift-mtv.svc:443/provider-validate?timeout=10s\\": x509: certificate signed by unknown authority","reason":"InternalError","details":{"causes":[{"message":"failed calling webhook \\"providers.forklift.konveyor\\": failed to call webhook: Post \\"https://forklift-api.openshift-mtv.svc:443/provider-validate?timeout=10s\\": x509: certificate signed by unknown authority"}]},"code":500}\n'
- The forklift-controller is failing to start and events have the below message:
80s Warning FailedMount pod/forklift-controller-7d9ccd7b7b-x7pzv MountVolume.SetUp failed for volume "forklift-validation-serving-cert" : secret "forklift-validation-serving-cert" not found
3m28s Normal SuccessfulCreate replicaset/forklift-controller-7d9ccd7b7b Created pod: forklift-controller-7d9ccd7b7b-x7pzv
85s Warning FailedMount pod/forklift-controller-7d9ccd7b7b-x7pzv Unable to attach or mount volumes: unmounted volumes=[forklift-validation-serving-cert], unattached volumes=[forklift-validation-serving-cert cert profiler kube-api-access-d56cg inventory forklift-inventory-serving-cert]: timed out waiting for the condition
Environment
- Red Hat OpenShift Container Platform 4.12, 4.13.
- Migration Toolkit for Virtualization 2.4, 2.5.
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.