Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Added Certificate Issue troubleshooting steps for Disconnected Environment #60

Merged
merged 2 commits into from
Oct 9, 2024
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
27 changes: 27 additions & 0 deletions documentation/disconnected-notes/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -387,3 +387,30 @@ spec:

The ai-accelerator uses Red Hat GitOps (ArgoCD) to define what to install. As such, you'll need a git repo that
ArgoCD can dial out to. For this Proof of Concept, we utilized Gitea as described by RHPDS - [Gitea Operator](https://github.com/rhpds/gitea-operator)
### Certificate Issue

You may see below certificate error while downloading models from model storage or external storage. This error comes when the certificates to be trusted are missing from cluster wide certificate authority bundle.

```

2024-10-01714:55:39Z
Failed to pull model from storage
{"model_id": "fraud_", "error": "rc
error:
code = Unknown desc = Failed to pull model from storage due to error: unable to list objects in bucket
'my-storage': RequestError: send request failedincaused by: Get \"htts://xxxxxxx\": *509: certificate signed by unknown authority"}

```

Please follow the below steps to fix the issue

```
$ oc get secret -n openshift-ingress-operator router-ca -o jsonpath='{.data.tls\.crt}' | base64 -d > openshift-ca-bundle.pem
$ oc get configmap -n openshift-config openshift-service-ca.crt -o jsonpath='{.data.service-ca\.crt}' >> openshift-ca-bundle.pem
$ CA_BUNDLE_FILE=./openshift-ca-bundle.pem
$ oc patch dscinitialization default-dsci --type='json' -p='[{"op":"replace","path":"/spec/trustedCABundle/customCABundle","value":"'"$(awk '{printf "%s\\n", $0}' $CA_BUNDLE_FILE)"'"}]'

```
For more information see below link

https://docs.redhat.com/en/documentation/red_hat_openshift_ai_self-managed/2.13/html/installing_and_uninstalling_openshift_ai_self-managed/working-with-certificates_certs