Installation of applications on cluster fails with "Get XYZ.COM: x509: certificate is valid for *.gitlab.domain.tld, gitlab.domain.tld, not XYZ.COM"
When using Kubernetes integration, installation of helm or other applications can fail with the following error within a cluster created in Jelastic environment:
Get XYZ.COM: x509: certificate is valid for *.gitlab.domain.tld, gitlab.domain.tld, not XYZ.COM
To fix it, in /etc/resolv.conf
file on your Master and Worker nodes you need to search and remove search XYZ.com
entry. Note that it will be necessary to remove it every time after a restart as it gets added by Jelastic automatically.
This workaround is described in https://stackoverflow.com/questions/54163478/internal-certificate-used-when-installing-helm-tiller-kubernetes/56456556#56456556. Creating the issue for history and to check if we can provide some long-term solution as suggested by @DylanGriffith in https://gitlab.com/gitlab-org/gitlab-ce/merge_requests/29742#note_181876185.
ZD: https://gitlab.zendesk.com/agent/tickets/122879 (internal)