Deploy csi-driver-nfs-sas fails with "tls: failed to verify certificate: x509: certificate signed by unknown authority"

[wweghe]

Viya4 Deployment Version Details

I'm getting this error when deploying the csi-driver-nfs :

TASK [baseline : Deploy csi-driver-nfs-sas] ************************************
fatal: [localhost]: FAILED! => changed=false
command: /usr/local/bin/helm --version=4.11.0 --repo=https://raw.githubusercontent.com/kubernetes-csi/csi-driver-nfs/master/charts show chart 'csi-driver-nfs'
msg: |-
Failure when executing Helm command. Exited 1.
stdout:
stderr: Error: looks like "https://raw.githubusercontent.com/kubernetes-csi/csi-driver-nfs/master/charts" is not a valid chart repository or cannot be reached: Get "https://raw.githubusercontent.com/kubernetes-csi/csi-driver-nfs/master/charts/index.yaml": tls: failed to verify certificate: x509: certificate signed by unknown authority
stderr: |-
Error: looks like "https://raw.githubusercontent.com/kubernetes-csi/csi-driver-nfs/master/charts" is not a valid chart repository or cannot be reached: Get "https://raw.githubusercontent.com/kubernetes-csi/csi-driver-nfs/master/charts/index.yaml": tls: failed to verify certificate: x509: certificate signed by unknown authority
stderr_lines:
stdout: ''
stdout_lines:

This url exists https://raw.githubusercontent.com/kubernetes-csi/csi-driver-nfs/master/charts/index.yaml, but it would seem the docker run command doesn't allow it as the certificate is signed by unknown authority

Ansible Variable File Details

No response

Steps to Reproduce

I pulled the latest repo, adapted my yaml-file to my needs, and ran the docker command.
This resulted in the tls: failed to verify certificate: x509: certificate signed by unknown authority

Expected Behavior

I should be able to install the latest csi-driver-nfs

Actual Behavior

I am not able to install the latest csi-driver-nfs

Additional Context

No response

References

No response

Code of Conduct

• I agree to follow this project's Code of Conduct

[saschjmil]

Hi @wweghe. I've installed Viya a few times today but I haven't encountered this issue. I checked the csi-driver-nfs git issues as well but I'm not seeing anything reported there.

If you have helm installed on your machine, what happens when you run helm --version=4.11.0 --repo=https://raw.githubusercontent.com/kubernetes-csi/csi-driver-nfs/master/charts show chart 'csi-driver-nfs'?

I also found this StackOverflow discussion about helm failures that seems related: https://stackoverflow.com/questions/48119650/helm-x509-certificate-signed-by-unknown-authority

[wweghe]

Hi Chris,

Thanks for getting back to me on this topic.
I retried the exact docker run command today, on the exact same infrastructure (WSL on my laptop) with the exact same tfvars and yaml files, and the installation of the nfs-csi-driver with hem worked like a charm.
Could this have been a temporary glitch on the kubernetes csi site ?
Anyway, thanks for the support, issue can be closed.

Regards,
Wouter.

[saschjmil]

Glad to hear that it's working. I'm not sure why it had trouble installing the nfs-csi-driver. Like you said, it could have been a temporary glitch on their side.