Unable to install MTV(Migration Toolkit for Virtualization) with error "failed to call webhook: certificate signed by unknown authority"

Solution Verified - Updated -

Issue

  • Installation/Upgrade of OpenShift MTV [Migration Toolkit for Virtualization] fails with the following message in the forklift-operator logs:
Failed to create object: b'{"kind":"Status","apiVersion":"v1","metadata":{},"status":"Failure","message":"Internal error occurred: failed calling webhook \\"providers.forklift.konveyor\\": failed to call webhook: Post \\"https://forklift-api.openshift-mtv.svc:443/provider-validate?timeout=10s\\": x509: certificate signed by unknown authority","reason":"InternalError","details":{"causes":[{"message":"failed calling webhook \\"providers.forklift.konveyor\\": failed to call webhook: Post \\"https://forklift-api.openshift-mtv.svc:443/provider-validate?timeout=10s\\": x509: certificate signed by unknown authority"}]},"code":500}\n'
  • The forklift-controller is failing to start and events have the below message:
80s         Warning   FailedMount           pod/forklift-controller-7d9ccd7b7b-x7pzv                     MountVolume.SetUp failed for volume "forklift-validation-serving-cert" : secret "forklift-validation-serving-cert" not found
3m28s       Normal    SuccessfulCreate      replicaset/forklift-controller-7d9ccd7b7b                    Created pod: forklift-controller-7d9ccd7b7b-x7pzv
85s         Warning   FailedMount           pod/forklift-controller-7d9ccd7b7b-x7pzv                     Unable to attach or mount volumes: unmounted volumes=[forklift-validation-serving-cert], unattached volumes=[forklift-validation-serving-cert cert profiler kube-api-access-d56cg inventory forklift-inventory-serving-cert]: timed out waiting for the condition

Environment

  • Red Hat OpenShift Container Platform 4.12, 4.13.
  • Migration Toolkit for Virtualization 2.4, 2.5.

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content