Skip to content
This repository has been archived by the owner on May 16, 2023. It is now read-only.

kibana cannot be installed, output self signed certificate in certificate chain #1792

Open
hoorayman opened this issue May 9, 2023 · 2 comments

Comments

@hoorayman
Copy link

Chart version:

Kubernetes version: v1.23.10

Kubernetes provider: native kubernetes

Helm Version: v3.11.0-rc.1

Describe the bug:
kibana cannot be installed, output self signed certificate in certificate chain

Steps to reproduce:

  1. prepare custom values.yaml called kibanavalues.yml
  2. helm install -f kibanavalues.yml kibana-n1 -n middleware-elasticsearch-n1 ./helm-charts/kibana

Content of kibanavalues.yml:

elasticsearchHosts: "https://elasticsearch-master.middleware-elasticsearch-n1.svc:9200"
elasticsearchCertificateSecret: elastic-certificate-crt
elasticsearchCertificateAuthoritiesFile: elastic-certificate.crt

podSecurityContext:
  fsGroup: null

securityContext:
  runAsUser: null

kibanaConfig:
  kibana.yml: |
    elasticsearch.username: "elastic"
    elasticsearch.password: "dgR2bjBW6yxBc2X653du"
    elasticsearch.ssl.verificationMode: none
    server.ssl.enabled: false
    server.rewriteBasePath: false

Expected behavior:
installed successfully

But Error occured and Output:

Creating a new Elasticsearch token for Kibana
Cleaning previous token
DELETE undefined failed: self signed certificate in certificate chain
Error: self signed certificate in certificate chain
at TLSSocket.onConnectSecure (node:_tls_wrap:1539:34)
at TLSSocket.emit (node:events:513:28)
at TLSSocket._finishInit (node:_tls_wrap:953:8)
at TLSWrap.ssl.onhandshakedone (node:_tls_wrap:734:12) {
code: 'SELF_SIGNED_CERT_IN_CHAIN'
}

@hoorayman
Copy link
Author

Like the js script cannot check elasticsearch self signed cert right, so cannot be installed successfully.

@hoorayman
Copy link
Author

I made a mistake in kubernetes provider and version, should be:
Kubernetes version: v1.25.8+27e744f
Kubernetes provider: OKD 4.12

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant