OpenShift 4에서 알 수 없는 기관에 의해 서명된 x509 인증서로 RouterCertsDegraded
Issue
-
기본 ingress 인증서를 사용자 정의 인증서로 교체한 후,
authentication클러스터 운영자가 아래 오류와 함께 비정상 상태가 됩니다:RouterCertsDegraded: secret/v4-0-config-system-router-certs.spec.data[apps.example.com] -n openshift-authentication: certificate could not validate route hostname oauth-openshift.apps.example.com: x509: certificate signed by unknown authorityEvent(v1.ObjectReference{Kind:"Deployment", Namespace:"openshift-authentication-operator", Name:"authentication-operator", UID:"<UID>", APIVersion:"apps/v1", ResourceVersion:"", FieldPath:""}): type: 'Normal' reason: 'OperatorStatusChanged' Status for clusteroperator/authentication changed: Degraded changed from False to True ("RouterCertsDegraded: secret/v4-0-config-system-router-certs.spec.data[apps.example.com] -n openshift-authentication: certificate could not validate route hostname oauth-openshift.apps.example.com: x509: certificate signed by unknown authority") [...]
Environment
- Red Hat OpenShift Container Platform (RHOCP)
- 4
- Ingress 사용자 정의 인증서
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.