Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

secret creation error when passing additional certificate #908

Open
mmurhamm opened this issue Nov 23, 2024 · 0 comments
Open

secret creation error when passing additional certificate #908

mmurhamm opened this issue Nov 23, 2024 · 0 comments

Comments

@mmurhamm
Copy link

I need to pass a server cert (or cert chain?) to a scanner in order to prevent ssl error when connecting to local registry.
helm command:

helm upgrade --install --namespace aqua scanner aqua-helm/scanner --set platform=k3s,serviceAccount.create=true,serviceAccount.name=aqua-scanner-sa,imageCredentials.create=true,imageCredentials.username=<my_user>,imageCredentials.password=<my_pw>,server.scheme=https,server.serviceName=<my_tenant>.cloud.aquasec.com,server.port=443,scannerToken=<my_token>,directCC.enabled=false,additionalCerts[0].createSecret=true,additionalCerts[0].secretName="scanner-localreg-cert-chain",additionalCerts[0].certFile="localreg-pem.base64" --dry-run --debug

I get the following error:

install.go:222: [debug] Original chart version: ""
install.go:239: [debug] CHART PATH: C:\Users\<my_win-user>\AppData\Local\Temp\helm\repository\scanner-2022.4.8.tgz

Error: template: scanner/templates/scanner-cert-secret.yaml:11:20: executing "scanner/templates/scanner-cert-secret.yaml" at <.Release.Name>: nil pointer evaluating interface {}.Name
helm.go:84: [debug] template: scanner/templates/scanner-cert-secret.yaml:11:20: executing "scanner/templates/scanner-cert-secret.yaml" at <.Release.Name>: nil pointer evaluating interface {}.Name

The scanner installs okay w/o additionalCerts[] but then fails to connect to local registry (ping okay) because of not trusted server cert (verified using wget --spider to registry url from within scanner container).

What is the problem?
Thanks.

helm version: v3.15.3 (Windows 11 Home 24H2)
helm chart: aqua-helm/scanner 2022.4.8 2022.4
kubernetes: k3s v1.31.2+k3s1 (Ubuntu 24.04.1 LTS)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant