Uploaded image for project: 'Kogito'
  1. Kogito
  2. KOGITO-10079

Errors with custom truststore

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Major Major
    • None
    • None
    • Runtime Tooling
    • None
    • False
    • None
    • False
    • ---
    • ---

      Hi,

       My customer is having issues with the custom truststore with the RHPAM kogito operator. The error we are seeing is:

      INFO ---> Configuring custom Java Truststore 'cacerts' in the path /home/kogito/certs/custom-truststore
      ERROR ---> A custom truststore was specified ('cacerts'), but wasn't found in the path /home/kogito/certs/custom-truststore. Make sure that the path is mounted and accessible in your container

      It appears on investigation into the pod that the mountpoints maybe incorrect, what is requested for the pod is:

      volumeMounts:
              - name: kogito-truststore
                mountPath: /home/kogito/certs/custom-truststore/cacerts/cacerts
                subPath: cacerts
              - name: kogito-truststore
                mountPath: /home/kogito/certs/custom-truststore/cacerts/keyStorePassword
                subPath: keyStorePassword
              - name: kube-api-access-8khf7
                readOnly: true
                mountPath: /var/run/secrets/kubernetes.io/serviceaccount

       

      But what we see in the pod is:

      sh-4.4$ pwd
      /home/kogito/certs/custom-truststore/cacerts
      sh-4.4$ ls -alr
      total 12
      rw-r----. 1 root 1002110000   12 Apr 25 10:36 keyStorePassword
      rw-r----. 1 root 1002110000 5338 Apr 25 10:36 cacerts
      drwxr-xr-x. 3 root root         21 Apr 25 10:36 ..
      drwxr-xr-x. 2 root root         45 Apr 25 10:36 .
      sh-4.4$

       

            rh-ee-pefernan Pere Fernandez Perez
            rhn-support-andbartl Andy Bartlett
            Barbora Siskova Barbora Siskova
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated: