Cluster information:
Kubernetes version: 1.27.16
Cloud being used: (put bare-metal if not on a public cloud) EC2 (govcloud)
Installation method: via Ansible
Host OS: Rocky 8
CNI and version: Don’t currently have
CRI and version: Don’t currently have
Hello, I’m currently working in an air-gapped environment with using Kubespray 2.24.3 to install Kubernetes 1.27.16 on a minimal 6 node EC2. The reason we are using an older version is that we have older Kubernetes clusters running and want to automate spinning up and down clusters to test upgrading before actually upgrading our production clusters.
I’m hosting all of the recommended binaries in an internal Nexus and all of the recommended container images are being hosted in an internal Harbor registry.
I’m failing on the following task:
TASK [ kubernetes/control-plane : Kubeadm | Initialize first master ]
I’ve manually added the certs from Harbor to the EC2s but come to find out the cert chain is broken (missing Root cert).
I’ve tried to do some settings within either all.yml or offline.yml to ignore certs but that hasn’t worked.
I’ve tried to tell pull images using crictl from one of the nodes and that failed as well too.
I’m not sure what to do at this point to try and work around the busted cert chain.
I’m writing this up from memory, so apologies if I’ve missed some things.