The certificate used by os-image-server does not seem to contain the correct bootstrap IP.

Related to !4256 (merged)

Error message:

errorMessage: 'Image provisioning failed: Failed to prepare to deploy: Validation                                                                                                                                
    of image href https://172.XY.XX.YY/opensuse-15-6-plain-rke2-1-31-8-0.4.12.raw                                                                                                                                 
    failed, reason: HTTPSConnectionPool(host=''172.20.86.120'', port=443): Max retries                                                                                                                                 exceeded with url: /opensuse-15-6-plain-rke2-1-31-8-0.4.12.raw (Caused by SSLError(CertificateError("hostname                                                                                                  
    ''172.XY.XX.YY'' doesn''t match either of ''localhost'', ''127.0.0.1'', ''172.18.0.2''")))'     

172.18.0.2 is the Kind cluster ip
172.XY.XX.YY is the server IP which host my bootstrap clusterIP

The error may be due to :

  ingress-nginx-init:
    kustomization_spec:
      postBuild:
        substitute:
          CLUSTER_IP: "{{ .Values._internal.bootstrap_node_ip }}"

CLUSTER_IP should probably set to .Values.display_external_ip

^ it's a quick first analysis, it's necessary to test and make sure it works in the different environments (capm3-libvirt, real baremetals...)
Bootstrap IP management can be a bit complex across all our different environments.

Edited May 22, 2025 by Remi Le Trocquer
Assignee Loading
Time tracking Loading