hyperledger-bevel / bevel-operator-fabric

Hyperledger Fabric Kubernetes operator - Hyperledger Fabric operator for Kubernetes (v2.3, v2.4 and v2.5, soon 3.0)
https://hyperledger-bevel.github.io/bevel-operator-fabric/
Apache License 2.0
278 stars 93 forks source link

Getting an error x509: certificate is valid for 127.0.0.1 ,xx.xx.xx.xx not xx.xx.xx.xx #214

Open PadaliaIsha opened 9 months ago

PadaliaIsha commented 9 months ago

Currently, I'm building a network on Kubernetes using this repo. there were 2 worker nodes. I set up a Kube config file of AWS EKS.

When I run the command :

kubectl hlf ca register --name=${caName} --user=${user} --secret=${secret} --type=${type} \
                --enroll-id ${bootstrapUserId} --enroll-secret=${bootstrapUserSecret} --mspid ${mspId}

Getting an error which is enroll failed: enroll failed: POST failure of request: POST https://xx.xx.xx.xx:31931/enroll {"hosts":null,"certificate_request":"-----BEGIN CERTIFICATE REQUEST-----\nMIH3MIGfAgEAMBeeeeeeeeBMGByqGSM49AgEGCCqGSM49\nAwEHA0IABJkaVaotjYa3gO1Gm02VDEeiUbedgus0HKJ12xqV7a+Pu5CNNN60jNEG\nAZEpGLV9RvZu0iNnYGToH+HRCs1PJ+qgLDAqBgkqhkiG9w0BCQ4xHTAbMBkGA1Ud\nEQQSMBCCDmRvY2tlci1kZXNrdG9wMAoGCCqGSM49BAMCA0cAMEQCIAEo5t2PqeeeeeeeeTtbiJ7JQDifDDeOOCuv16AiB1ZuIjlIQ/WaylWWmh5gLTcbm3Yyzb\nGS7+9+tbIxUV1g==\n-----END CERTIFICATE REQUEST-----\n","profile":"","crl_override":"","label":"","NotBefore":"0001-01-01T00:00:00Z","NotAfter":"0001-01-01T00:00:00Z","ReturnPrecert":false,"CAName":""}: Post "https://xx.xx.xx.xx:31931/enroll": x509: certificate is valid for 127.0.0.1, xx.xx.xx.xx, not xx.xx.xx

Could anyone please tell me if our cert is stored on any server at first run and we can't access the new cert on new IP or any other issue?