Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Getting x509: certificate signed by unknown authority Error after applying ClusterImagePolicy #1227

Open
senanz opened this issue Jan 31, 2024 · 0 comments
Labels
question Further information is requested

Comments

@senanz
Copy link

senanz commented Jan 31, 2024

I have installed policy-controller pod and it's running and in ready status:
image
Then created TrustRoot and CIP successfully:
image
The issue when i trying to run kubectl get CIP I'm getting this error:
Error from server: conversion webhook for policy.sigstore.dev/v1alpha1, Kind=ClusterImagePolicy failed: Post "https://webhook.ncms.svc:443/?timeout=30s": x509: certificate signed by unknown authority

image_policy.yaml:
apiVersion: policy.sigstore.dev/v1alpha1
kind: ClusterImagePolicy
metadata:
name: demo2
spec:
images:

  • glob: "my-registry:5000/**"
    authorities:
  • name : keyless
    keyless:
    trustRootRef: my-sigstore-keys2
    url: https://fulcio.mysigstore.dev
    insecureIgnoreSCT: true
    identities:
    • issuerRegExp: '.'
      subjectRegExp: '.
      '

Anyone face the same issue before?

@senanz senanz added the question Further information is requested label Jan 31, 2024
@senanz senanz changed the title Getting x509: certificate signed by unknown authority Error after apllying ClusterImagePolicy Getting x509: certificate signed by unknown authority Error after applying ClusterImagePolicy Jan 31, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
question Further information is requested
Projects
None yet
Development

No branches or pull requests

1 participant