kata-containers / tests

Kata Containers tests, CI, and metrics
https://katacontainers.io/
Apache License 2.0
139 stars 196 forks source link

ci: Switch to http kubernetes mirror #5681

Closed jepio closed 1 year ago

jepio commented 1 year ago

SEV tests regularly fail with this error message:

Err:5 https://packages.cloud.google.com/apt kubernetes-xenial-unstable Release Certificate verification failed: The certificate is NOT trusted. The certificate issuer is unknown. Could not handshake: Error in the certificate verification. [IP: 142.250.189.174 443]

It is likely, that the issue is caused by a TLS MITM proxy, that does network scanning. If we switch to the http version of the mirror, we might have more luck. This is safe to do because the mirror is verified using gpg signatures.

Fixes: #7039

jepio commented 1 year ago

/test

jepio commented 1 year ago

/retest-devmapper

fitzthum commented 1 year ago

btw @ryansavino

jepio commented 1 year ago

Merging (devmapper tests are flaky on main right now, this is being debugged in kata-containers).