search

operate-first / apps

Operate-first application manifests
GNU General Public License v3.0
51 stars 137 forks source link

Kubernetes vault auth on jerry failing becuase of staging certificate #2508

Closed SamoKopecky closed 2 years ago

SamoKopecky commented 2 years ago

When I try to get a client token via this command:

vault write auth/jerry-k8s/login role=service-catalog jwt="$VAULT_AUTH_TOKEN" -format=json

where VAULT_AUTH_TOKEN is the SA token for vault-secret-writer in the service-catalog-k8s-plugin namespace, the vault pod reports this error.

2022-10-03T18:24:17.352Z [ERROR] auth.kubernetes.auth_kubernetes_8c256944: login unauthorized due to: Post "https://api.jerry.ionos.emea.operate-first.cloud:6443/apis/authentication.k8s.io/v1/tokenreviews": x509: certificate signed by unknown authority
SamoKopecky commented 2 years ago

/assign