OKD installation using custom certificatesUnable to mount volumes for podDeploying Docker images from Gitlab's private Docker registry to OpenshiftMulti module maven project not being deployed on OpenShift (S2I)Openshift Origin 3.9 - Ansible - WebConsoleAdd new user in OKD with htpasswd not workingWhen using jenkins in openshift, how to make sure that maven is invoked in the correct directory?Cannot start an example buildOpenshift / Keycloak 4.8.3. Login to Admin Console infinite redirect loopOpenShift / OKD Specify URL for each Pod Replica
Print the phrase "And she said, 'But that's his.'" using only the alphabet
What happens when one target of Paradoxical Outcome becomes illegal?
What did the 8086 (and 8088) do upon encountering an illegal instruction?
How long would it take for sucrose to undergo hydrolysis in boiling water?
Someone who is granted access to information but not expected to read it
A flower's head or heart?
Can Mage Hand be used to indirectly trigger an attack?
Why are backslashes included in this shell script?
Writing mathematical symbol with bold
Realistic, logical way for men with medieval-era weaponry to compete with much larger and physically stronger foes
Is it ethical to cite a reviewer's papers even if they are rather irrelevant?
Opposite of "Concerto Grosso"?
Was the Lonely Mountain, where Smaug lived, a volcano?
Jam with honey & without pectin has a saucy consistency always
usage of mir gefallen
Is it a good security practice to force employees hide their employer to avoid being targeted?
Why is gun control associated with the socially liberal Democratic party?
Can I get a photo of an Ancient Arrow?
Would a bit of grease on overhead door cables or bearings cause the springs to break?
Boss making me feel guilty for leaving the company at the end of my internship
Why did the Death Eaters wait to reopen the Chamber of Secrets?
How can I find out about the game world without meta-influencing it?
Short story about psychologist analyzing demon
How Many Times To Repeat An Event With Known Probability Before It Has Occurred A Number of Times
OKD installation using custom certificates
Unable to mount volumes for podDeploying Docker images from Gitlab's private Docker registry to OpenshiftMulti module maven project not being deployed on OpenShift (S2I)Openshift Origin 3.9 - Ansible - WebConsoleAdd new user in OKD with htpasswd not workingWhen using jenkins in openshift, how to make sure that maven is invoked in the correct directory?Cannot start an example buildOpenshift / Keycloak 4.8.3. Login to Admin Console infinite redirect loopOpenShift / OKD Specify URL for each Pod Replica
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;
Im trying to install OKD 3.11 using custom ssl certificates, however they never seem to be applied.
In my openshift ansible inventory I have the following:
openshift_master_cluster_public_hostname=console.openshift.mydomain.com
openshift_master_named_certificates=["certfile": "/home/user/git/project/openshift-install/openshift/ansible/playbooks/common/private/certs/cert.pem", "keyfile": "/home/user/git/project/openshift-install/openshift/ansible/playbooks/common/private/certs/key.pem", "cafile": "/home/user/git/project/openshift-install/openshift/ansible/playbooks/common/private/certs/cert.ca-bundle"]
openshift_master_overwrite_named_certificates=true
When we try to login to the webconsole we still get invalid ssl cert warnings, and the web console doesnt work correct due to this, eg, the logs tab always fails to display logs.
I've also tried:
oc delete secret webconsole-serving-cert
oc delete pods webconsole=true
But this also didnt help.
kubernetes openshift openshift-origin okd asked Mar 25 at 1:18
MagickMagick
87933161
add a comment |
Im trying to install OKD 3.11 using custom ssl certificates, however they never seem to be applied.
In my openshift ansible inventory I have the following:
openshift_master_cluster_public_hostname=console.openshift.mydomain.com
openshift_master_named_certificates=["certfile": "/home/user/git/project/openshift-install/openshift/ansible/playbooks/common/private/certs/cert.pem", "keyfile": "/home/user/git/project/openshift-install/openshift/ansible/playbooks/common/private/certs/key.pem", "cafile": "/home/user/git/project/openshift-install/openshift/ansible/playbooks/common/private/certs/cert.ca-bundle"]
openshift_master_overwrite_named_certificates=true
When we try to login to the webconsole we still get invalid ssl cert warnings, and the web console doesnt work correct due to this, eg, the logs tab always fails to display logs.
I've also tried:
oc delete secret webconsole-serving-cert
oc delete pods webconsole=true
But this also didnt help.
kubernetes openshift openshift-origin okd asked Mar 25 at 1:18
MagickMagick
87933161
try to use a fullchain certificate as "certfile" - Maybe you could also make use of the "names" parameter, see this example
– John
Mar 26 at 14:32
add a comment |
Im trying to install OKD 3.11 using custom ssl certificates, however they never seem to be applied.
In my openshift ansible inventory I have the following:
openshift_master_cluster_public_hostname=console.openshift.mydomain.com
openshift_master_named_certificates=["certfile": "/home/user/git/project/openshift-install/openshift/ansible/playbooks/common/private/certs/cert.pem", "keyfile": "/home/user/git/project/openshift-install/openshift/ansible/playbooks/common/private/certs/key.pem", "cafile": "/home/user/git/project/openshift-install/openshift/ansible/playbooks/common/private/certs/cert.ca-bundle"]
openshift_master_overwrite_named_certificates=true
When we try to login to the webconsole we still get invalid ssl cert warnings, and the web console doesnt work correct due to this, eg, the logs tab always fails to display logs.
I've also tried:
oc delete secret webconsole-serving-cert
oc delete pods webconsole=true
But this also didnt help.
kubernetes openshift openshift-origin okd asked Mar 25 at 1:18
MagickMagick
87933161
Im trying to install OKD 3.11 using custom ssl certificates, however they never seem to be applied.
In my openshift ansible inventory I have the following:
openshift_master_cluster_public_hostname=console.openshift.mydomain.com
openshift_master_named_certificates=["certfile": "/home/user/git/project/openshift-install/openshift/ansible/playbooks/common/private/certs/cert.pem", "keyfile": "/home/user/git/project/openshift-install/openshift/ansible/playbooks/common/private/certs/key.pem", "cafile": "/home/user/git/project/openshift-install/openshift/ansible/playbooks/common/private/certs/cert.ca-bundle"]
openshift_master_overwrite_named_certificates=true
When we try to login to the webconsole we still get invalid ssl cert warnings, and the web console doesnt work correct due to this, eg, the logs tab always fails to display logs.
I've also tried:
oc delete secret webconsole-serving-cert
oc delete pods webconsole=true
But this also didnt help.
kubernetes openshift openshift-origin okd kubernetes openshift openshift-origin okd asked Mar 25 at 1:18
MagickMagick
87933161
asked Mar 25 at 1:18
MagickMagick
87933161
edited Mar 26 at 1:20
Magick
asked Mar 25 at 1:18
MagickMagick
87933161
asked Mar 25 at 1:18
MagickMagick
87933161
asked Mar 25 at 1:18
MagickMagick
87933161
87933161
try to use a fullchain certificate as "certfile" - Maybe you could also make use of the "names" parameter, see this example
– John
Mar 26 at 14:32
add a comment |
try to use a fullchain certificate as "certfile" - Maybe you could also make use of the "names" parameter, see this example
– John
Mar 26 at 14:32
try to use a fullchain certificate as "certfile" - Maybe you could also make use of the "names" parameter, see this example
– John
Mar 26 at 14:32
try to use a fullchain certificate as "certfile" - Maybe you could also make use of the "names" parameter, see this example
– John
Mar 26 at 14:32
add a comment |
0
active
oldest
votes
Your Answer
StackExchange.ifUsing("editor", function ()
StackExchange.using("externalEditor", function ()
StackExchange.using("snippets", function ()
StackExchange.snippets.init();
);
);
, "code-snippets");
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "1"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f55330183%2fokd-installation-using-custom-certificates%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
0
active
oldest
votes
0
active
oldest
votes
active
oldest
votes
active
oldest
votes
Thanks for contributing an answer to Stack Overflow!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f55330183%2fokd-installation-using-custom-certificates%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
try to use a fullchain certificate as "certfile" - Maybe you could also make use of the "names" parameter, see this example
– John
Mar 26 at 14:32