error while installing strimzi #6679

shivajigoulikar · 2022-04-13T13:39:32Z

shivajigoulikar
Apr 13, 2022

Getting an error when Applying Strimzi installation file

kubectl create -f 'https://strimzi.io/install/latest?namespace=kafka' -n kafka
throwing the following error

scholzj · 2022-04-13T13:53:12Z

scholzj
Apr 13, 2022
Maintainer

Seems to work fine for me:

$ kubectl apply -f 'https://strimzi.io/install/latest?namespace=myproject' -n myproject
rolebinding.rbac.authorization.k8s.io/strimzi-cluster-operator-entity-operator-delegation created
customresourcedefinition.apiextensions.k8s.io/strimzipodsets.core.strimzi.io created
clusterrole.rbac.authorization.k8s.io/strimzi-kafka-client created
customresourcedefinition.apiextensions.k8s.io/kafkausers.kafka.strimzi.io created
clusterrolebinding.rbac.authorization.k8s.io/strimzi-cluster-operator-kafka-broker-delegation created
configmap/strimzi-cluster-operator created
customresourcedefinition.apiextensions.k8s.io/kafkas.kafka.strimzi.io created
clusterrole.rbac.authorization.k8s.io/strimzi-cluster-operator-namespaced created
customresourcedefinition.apiextensions.k8s.io/kafkatopics.kafka.strimzi.io created
customresourcedefinition.apiextensions.k8s.io/kafkaconnects.kafka.strimzi.io created
customresourcedefinition.apiextensions.k8s.io/kafkabridges.kafka.strimzi.io created
customresourcedefinition.apiextensions.k8s.io/kafkaconnectors.kafka.strimzi.io created
clusterrole.rbac.authorization.k8s.io/strimzi-entity-operator created
clusterrole.rbac.authorization.k8s.io/strimzi-cluster-operator-global created
clusterrolebinding.rbac.authorization.k8s.io/strimzi-cluster-operator-kafka-client-delegation created
customresourcedefinition.apiextensions.k8s.io/kafkamirrormakers.kafka.strimzi.io created
clusterrole.rbac.authorization.k8s.io/strimzi-kafka-broker created
customresourcedefinition.apiextensions.k8s.io/kafkamirrormaker2s.kafka.strimzi.io created
customresourcedefinition.apiextensions.k8s.io/kafkarebalances.kafka.strimzi.io created
serviceaccount/strimzi-cluster-operator created
deployment.apps/strimzi-cluster-operator created
clusterrolebinding.rbac.authorization.k8s.io/strimzi-cluster-operator created
rolebinding.rbac.authorization.k8s.io/strimzi-cluster-operator created

So I guess you have either some wrong certificates in your system whihc do not trust the website or the error comes from your Kube cluster. MAybe adding something like -v9 to the command will give you more details.

3 replies

shivajigoulikar Apr 13, 2022
Author

thank you for the fast reply, let me try and i will post the status

shivajigoulikar Apr 14, 2022
Author

could you get me the clarity on this

`[root@AUSPMINFKFPOC04 ~]# kubectl create -f 'https://strimzi.io/install/latest?namespace=kafka' -n kafka -v9
I0414 14:18:14.284818 61033 loader.go:372] Config loaded from file: /etc/kubernetes/admin.conf
I0414 14:18:14.285962 61033 round_trippers.go:466] curl -v -XGET -H "Accept: application/[email protected]+protobuf" -H "User-Agent: kubectl/v1.23.4 (linux/amd64) kubernetes/e6c093d" 'https://10.182.94.23:6443/openapi/v2?timeout=32s'
I0414 14:18:14.298179 61033 round_trippers.go:510] HTTP Trace: Dial to tcp:10.182.94.23:6443 succeed
I0414 14:18:14.304803 61033 round_trippers.go:570] HTTP Statistics: DNSLookup 0 ms Dial 0 ms TLSHandshake 5 ms ServerProcessing 1 ms Duration 18 ms
I0414 14:18:14.304821 61033 round_trippers.go:577] Response Headers:
I0414 14:18:14.304830 61033 round_trippers.go:580] Accept-Ranges: bytes
I0414 14:18:14.304837 61033 round_trippers.go:580] Date: Thu, 14 Apr 2022 04:18:14 GMT
I0414 14:18:14.304845 61033 round_trippers.go:580] Audit-Id: 0d4f7ed7-829f-4389-a75e-6c403f030e93
I0414 14:18:14.304851 61033 round_trippers.go:580] Content-Type: application/octet-stream
I0414 14:18:14.304858 61033 round_trippers.go:580] Last-Modified: Wed, 13 Apr 2022 09:29:44 GMT
I0414 14:18:14.304865 61033 round_trippers.go:580] Vary: Accept-Encoding
I0414 14:18:14.304872 61033 round_trippers.go:580] Vary: Accept
I0414 14:18:14.304878 61033 round_trippers.go:580] X-Varied-Accept: application/[email protected]+protobuf
I0414 14:18:14.304886 61033 round_trippers.go:580] Etag: "97148804FE66C81B86C90B0F32A2F94441A8ABDBF199889277E0EB74F28D5D61DED3F066B463676EB761B98670608E164F5D5347441141B536F221ABA6C36DF4"
I0414 14:18:14.304894 61033 round_trippers.go:580] X-From-Cache: 1
I0414 14:18:14.304905 61033 round_trippers.go:580] X-Kubernetes-Pf-Flowschema-Uid: 82f66797-8c07-4262-84e5-9657daf3b707
I0414 14:18:14.304912 61033 round_trippers.go:580] X-Kubernetes-Pf-Prioritylevel-Uid: 7b63fb97-89ca-45f2-90a1-8d39b6ecdbc9
I0414 14:18:14.304919 61033 round_trippers.go:580] Cache-Control: no-cache, private
I0414 14:18:14.408588 61033 request.go:1179] Response Body:
00000000 0a 03 32 2e 30 12 15 0a 0a 4b 75 62 65 72 6e 65 |..2.0....Kuberne|
00000010 74 65 73 12 07 76 31 2e 32 33 2e 34 42 bc f5 84 |tes..v1.23.4B...|
00000020 01 12 8c 02 0a 22 2f 2e 77 65 6c 6c 2d 6b 6e 6f |....."/.well-kno|
00000030 77 6e 2f 6f 70 65 6e 69 64 2d 63 6f 6e 66 69 67 |wn/openid-config|
00000040 75 72 61 74 69 6f 6e 2f 12 e5 01 12 e2 01 0a 09 |uration/........|
00000050 57 65 6c 6c 4b 6e 6f 77 6e 1a 57 67 65 74 20 73 |WellKnown.Wget s|
00000060 65 72 76 69 63 65 20 61 63 63 6f 75 6e 74 20 69 |ervice account i|
00000070 73 73 75 65 72 20 4f 70 65 6e 49 44 20 63 6f 6e |ssuer OpenID con|
00000080 66 69 67 75 72 61 74 69 6f 6e 2c 20 61 6c 73 6f |figuration, also|
00000090 20 6b 6e 6f 77 6e 20 61 73 20 74 68 65 20 27 4f | known as the 'O|
000000a0 49 44 43 20 64 69 73 63 6f 76 65 72 79 20 64 6f |IDC discovery do|
000000b0 63 27 2a 2a 67 65 74 53 65 72 76 69 63 65 41 63 |c'getServiceAc|
000000c0 63 6f 75 6e 74 49 73 73 75 65 72 4f 70 65 6e 49 |countIssuerOpenI|
000000d0 44 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 32 10 |DConfiguration2.|
000000e0 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e |application/json|
000000f0 4a 37 0a 1c 0a 03 32 30 30 12 15 0a 13 0a 02 4f |J7....200......O|
00000100 4b 12 0d 0a 0b b2 01 08 0a 06 73 74 72 69 6e 67 |K.........string|
00000110 0a 17 0a 03 34 30 31 12 10 0a 0e 0a 0c 55 6e 61 |....401......Una|
00000120 75 74 68 6f 72 69 7a 65 64 52 05 68 74 74 70 73 |uthorizedR.https|
00000130 12 ca 02 0a 05 2f 61 70 69 2f 12 c0 02 12 bd 02 |...../api/......|
00000140 0a 04 63 6f 72 65 1a 1a 67 65 74 20 61 76 61 69 |..core..get avai|
00000150 6c 61 62 6c 65 20 41 50 49 20 76 65 72 73 69 6f |lable API versio|
00000160 6e 73 2a 12 67 65 74 43 6f 72 65 41 50 49 56 65 |ns.getCoreAPIVe|
00000170 72 73 69 6f 6e 73 32 10 61 70 70 6c 69 63 61 74 |rsions2.applicat|
00000180 69 6f 6e 2f 6a 73 6f 6e 32 10 61 70 70 6c 69 63 |ion/json2.applic|
00000190 61 74 69 6f 6e 2f 79 61 6d 6c 32 23 61 70 70 6c |ation/yaml2#appl|
000001a0 69 63 61 74 69 6f 6e 2f 76 6e 64 2e 6b 75 62 65 |ication/vnd.kube|
000001b0 72 6e 65 74 65 73 2e 70 72 6f 74 6f 62 75 66 3a |rnetes.protobuf:|
000001c0 10 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f |.application/jso|
000001d0 6e 3a 10 61 70 70 6c 69 63 61 74 69 6f 6e 2f 79 |n:.application/y|
000001e0 61 6d 6c 3a 23 61 70 70 6c 69 63 61 74 69 6f 6e |aml:#application|
000001f0 2f 76 6e 64 2e 6b 75 62 65 72 6e 65 74 65 73 2e |/vnd.kubernetes.|
00000200 70 72 6f 74 6f 62 75 66 4a 6c 0a 51 0a 03 32 30 |protobufJl.Q..20|
00000210 30 12 4a 0a 48 0a 02 4f 4b 12 42 0a 40 0a 3e 23 |0.J.H..OK.B.@.>#|
00000220 2f 64 65 66 69 6e 69 74 69 6f 6e 73 2f 69 6f 2e |/definitions/io.|
00000230 6b 38 73 2e 61 70 69 6d 61 63 68 69 6e 65 72 79 |k8s.apimachinery|
00000240 2e 70 6b 67 2e 61 70 69 73 2e 6d 65 74 61 2e 76 |.pkg.apis.meta.v|
00000250 31 2e 41 50 49 56 65 72 73 69 6f 6e 73 0a 17 0a |1.APIVersions...|
00000260 03 34 30 31 12 10 0a 0e 0a 0c 55 6e 61 75 74 68 |.401......Unauth|
00000270 6f 72 69 7a 65 64 52 05 68 74 74 70 73 12 d4 02 |orizedR.https...|
00000280 0a 08 2f 61 70 69 2f 76 31 2f 12 c7 02 12 c4 02 |../api/v1/......|
00000290 0a 07 63 6f 72 65 5f 76 31 1a 17 67 65 74 20 61 |..core_v1..get a|
000002a0 76 61 69 6c 61 62 6c 65 20 72 65 73 6f 75 72 63 |vailable resourc|
000002b0 65 73 2a 15 67 65 74 43 6f 72 65 56 31 41 50 49 |es.getCoreV1API|
000002c0 52 65 73 6f 75 72 63 65 73 32 10 61 70 70 6c 69 |Resources2.appli|
000002d0 63 61 74 69 6f 6e 2f 6a 73 6f 6e 32 10 61 70 70 |cation/json2.app|
000002e0 6c 69 63 61 74 69 6f 6e 2f 79 61 6d 6c 32 23 61 |lication/yaml2#a|
000002f0 70 70 6c 69 63 61 74 69 6f 6e 2f 76 6e 64 2e 6b |pplication/vnd.k|
00000300 75 62 65 72 6e 65 74 65 73 2e 70 72 6f 74 6f 62 |ubernetes.protob|
00000310 75 66 3a 10 61 70 70 6c 69 63 61 74 69 6f 6e 2f |uf:.application/|
00000320 6a 73 6f 6e 3a 10 61 70 70 6c 69 63 61 74 69 6f |json:.applicatio|
00000330 6e 2f 79 61 6d 6c 3a 23 61 70 70 6c 69 63 61 74 |n/yaml:#applicat|
00000340 69 6f 6e 2f 76 6e 64 2e 6b 75 62 65 72 6e 65 74 |ion/vnd.kubernet|
00000350 65 73 2e 70 72 6f 74 6f 62 75 66 4a 70 0a 55 0a |es.protobufJp.U.|
00000360 03 32 30 30 12 4e 0a 4c 0a 02 4f 4b 12 46 0a 44 |.200.N.L..OK.F.D|
00000370 0a 42 23 2f 64 65 66 69 6e 69 74 69 6f 6e 73 2f |.B#/definitions/|
00000380 69 6f 2e 6b 38 73 2e 61 70 69 6d 61 63 68 69 6e |io.k8s.apimachin|
00000390 65 72 79 2e 70 6b 67 2e 61 70 69 73 2e 6d 65 74 |ery.pkg.apis.met|
000003a0 61 2e 76 31 2e 41 50 49 52 65 73 6f 75 72 63 65 |a.v1.APIResource|
000003b0 4c 69 73 74 0a 17 0a 03 34 30 31 12 10 0a 0e 0a |List....401.....|
000003c0 0c 55 6e 61 75 74 68 6f 72 69 7a 65 64 52 05 68 |.UnauthorizedR.h|
000003d0 74 74 70 73 12 9a 26 0a 19 2f 61 70 69 2f 76 31 |ttps..&../api/v1|
000003e0 2f 63 6f 6d 70 6f 6e 65 6e 74 73 74 61 74 75 73 |/componentstatus|
000003f0 65 73 12 fc 25 12 c7 03 0a 07 63 6f 72 65 5f 76 |es..%.....core_v|
00000400 31 1a 24 6c 69 73 74 20 6f 62 6a 65 63 74 73 20 |1.$list objects |
00000410 6f 66 20 6b 69 6e 64 20 43 6f 6d 70 6f 6e 65 6e |of kind Componen|
00000420 74 53 74 61 74 75 73 2a 19 6c 69 73 74 43 6f 72 |tStatus*.listCor|
00000430 65 56 31 43 6f 6d 70 6f 6e 65 6e 74 53 74 61 74 |eV1ComponentStat|
00000440 75 73 32 10 61 70 70 6c 69 63 61 74 69 6f 6e 2f |us2.application/|
00000450 6a 73 6f 6e 32 10 61 70 70 6c 69 63 61 74 69 6f |json2.applicatio|
00000460 6e 2f 79 61 6d 6c 32 23 61 70 70 6c 69 63 61 74 |n/yaml2#applicat|
00000470 69 6f 6e 2f 76 6e 64 2e 6b 75 62 65 72 6e 65 74 |ion/vnd.kubernet|
00000480 65 73 2e 70 72 6f 74 6f 62 75 66 32 1d 61 70 70 |es.protobuf2.app|
00000490 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 73 74 |lication/json;st|
000004a0 72 65 61 6d 3d 77 61 74 63 68 32 30 61 70 70 6c |ream=watch20appl|
000004b0 69 63 61 74 69 6f 6e 2f 76 6e 64 2e 6b 75 62 65 |ication/vnd.kube|
000004c0 72 6e 65 74 65 73 2e 70 72 6f 74 6f 62 75 66 3b |rnetes.protobuf;|
000004d0 73 74 72 65 61 6d 3d 77 61 74 63 68 3a 03 2a 2f |stream=watch:.*/|
000004e0 2a 4a 62 0a 47 0a 03 32 30 30 12 40 0a 3e 0a 02 |*Jb.G..200.@.>..|
000004f0 4f 4b 12 38 0a 36 0a 34 23 2f 64 65 66 69 6e 69 |OK.8.6.4#/defini|
00000500 74 69 6f 6e 73 2f 69 6f 2e 6b 38 73 2e 61 70 69 |tions/io.k8s.api|
00000510 2e 63 6f 72 65 2e 76 31 2e 43 6f 6d 70 6f 6e 65 |.core.v1.Compone|
00000520 6e 74 53 74 61 74 75 73 4c 69 73 74 0a 17 0a 03 |ntStatusList....|
00000530 34 30 31 12 10 0a 0e 0a 0c 55 6e 61 75 74 68 6f |401......Unautho|
00000540 72 69 7a 65 64 52 05 68 74 74 70 73 6a 1e 0a 13 |rizedR.httpsj...|
00000550 78 2d 6b 75 62 65 72 6e 65 74 65 73 2d 61 63 74 |x-kubernetes-act|
00000560 69 6f 6e 12 07 12 05 6c 69 73 74 0a 6a 51 0a 1f |ion....list.jQ..|
00000570 78 2d 6b 75 62 65 72 6e 65 74 65 73 2d 67 72 6f |x-kubernetes-gro|
00000580 75 70 2d 76 65 72 73 69 6f 6e 2d 6b 69 6e 64 12 |up-version-kind.|
00000590 2e 12 2c 67 72 6f 75 70 3a 20 22 22 0a 6b 69 6e |..,group: "".kin|
000005a0 64 3a 20 43 6f 6d 70 6f 6e 65 6e 74 53 74 61 74 |d: ComponentStat|
000005b0 75 73 0a 76 65 72 73 69 6f 6e 3a 20 76 31 0a 4a |us.version: v1.J|
000005c0 ab 03 0a a8 03 12 a5 03 1a a2 03 12 05 71 75 65 |.............que|
000005d0 72 79 1a f7 02 61 6c 6c 6f 77 57 61 74 63 68 42 |ry...allowWatchB|
000005e0 6f 6f 6b 6d 61 72 6b 73 20 72 65 71 75 65 73 74 |ookmarks request|
000005f0 73 20 77 61 74 63 68 20 65 76 65 6e 74 73 20 77 |s watch events w|
00000600 69 74 68 20 74 79 70 65 20 22 42 4f 4f 4b 4d 41 |ith type "BOOKMA|
00000610 52 4b 22 2e 20 53 65 72 76 65 72 73 20 74 68 61 |RK". Servers tha|
00000620 74 20 64 6f 20 6e 6f 74 20 69 6d 70 6c 65 6d 65 |t do not impleme|
00000630 6e 74 20 62 6f 6f 6b 6d 61 72 6b 73 20 6d 61 79 |nt bookmarks may|
00000640 20 69 67 6e 6f 72 65 20 74 68 69 73 20 66 6c 61 | ignore this fla|
00000650 67 20 61 6e 64 20 62 6f 6f 6b 6d 61 72 6b 73 20 |g and bookmarks |
00000660 61 72 65 20 73 65 6e 74 20 61 74 20 74 68 65 20 |are sent at the |
00000670 73 65 72 76 65 72 27 73 20 64 69 73 63 72 65 74 |server's discret|
00000680 69 6f 6e 2e 20 43 6c 69 65 6e 74 73 20 73 68 6f |ion. Clients sho|
00000690 75 6c 64 20 6e 6f 74 20 61 73 73 75 6d 65 20 62 |uld not assume b|
000006a0 6f 6f 6b 6d 61 72 6b 73 20 61 72 65 20 72 65 74 |ookmarks are ret|
000006b0 75 72 6e 65 64 20 61 74 20 61 6e 79 20 73 70 65 |urned at any spe|
000006c0 63 69 66 69 63 20 69 6e 74 65 72 76 61 6c 2c 20 |cific interval, |
000006d0 6e 6f 72 20 6d 61 79 20 74 68 65 79 20 61 73 73 |nor may they ass|
000006e0 75 6d 65 20 74 68 65 20 73 65 72 76 65 72 20 77 |ume the server w|
000006f0 69 6c 6c 20 73 65 6e 64 20 61 6e 79 20 42 4f 4f |ill send any BOO|
00000700 4b 4d 41 52 4b 20 65 76 65 6e 74 20 64 75 72 69 |KMARK event duri|
00000710 6e 67 20 61 20 73 65 73 73 69 6f 6e 2e 20 49 66 |ng a session. If|
00000720 20 74 68 69 73 20 69 73 20 6e 6f 74 20 61 20 77 | this is not a w|
00000730 61 74 63 68 2c 20 74 68 69 73 20 66 69 65 6c 64 |atch, this field|
00000740 20 69 73 20 69 67 6e 6f 72 65 64 2e 22 13 61 6c | is ignored.".al|
00000750 6c 6f 77 57 61 74 63 68 42 6f 6f 6b 6d 61 72 6b |lowWatchBookmark|
00000760 73 32 07 62 6f 6f 6c 65 61 6e a0 01 01 4a ef 09 |s2.boolean...J..|
00000770 0a ec 09 12 e9 09 1a e6 09 12 05 71 75 65 72 79 |...........query|
00000780 1a c7 09 54 68 65 20 63 6f 6e 74 69 6e 75 65 20 |...The continue |
00000790 6f 70 74 69 6f 6e 20 73 68 6f 75 6c 64 20 62 65 |option should be|
000007a0 20 73 65 74 20 77 68 65 6e 20 72 65 74 72 69 65 | set when retrie|
000007b0 76 69 6e 67 20 6d 6f 72 65 20 72 65 73 75 6c 74 |ving more result|
000007c0 73 20 66 72 6f 6d 20 74 68 65 20 73 65 72 76 65 |s from the serve|
000007d0 72 2e 20 53 69 6e 63 65 20 74 68 69 73 20 76 61 |r. Since this va|
000007e0 6c 75 65 20 69 73 20 73 65 72 76 65 72 20 64 65 |lue is server de|
000007f0 66 69 6e 65 64 2c 20 63 6c 69 65 6e 74 73 20 6d |fined, clients m|
00000800 61 79 20 6f 6e 6c 79 20 75 73 65 20 74 68 65 20 |ay only use the |
00000810 63 6f 6e 74 69 6e 75 65 20 76 61 6c 75 [truncated 14258182 chars]
I0414 14:18:16.676098 61033 helpers.go:237] Connection error: Get https://strimzi.io/install/latest?namespace=kafka: x509: certificate signed by unknown authority
F0414 14:18:16.676154 61033 helpers.go:118] Unable to connect to the server: x509: certificate signed by unknown authority
goroutine 1 [running]:
k8s.io/kubernetes/vendor/k8s.io/klog/v2.stacks(0x1)
/workspace/src/k8s.io/kubernetes/_output/dockerized/go/src/k8s.io/kubernetes/vendor/k8s.io/klog/v2/klog.go:1038 +0x8a
k8s.io/kubernetes/vendor/k8s.io/klog/v2.(*loggingT).output(0x307f000, 0x3, 0x0, 0xc001482310, 0x2, {0x25f2827, 0x10}, 0xc000060800, 0x0)
/workspace/src/k8s.io/kubernetes/_output/dockerized/go/src/k8s.io/kubernetes/vendor/k8s.io/klog/v2/klog.go:987 +0x5fd
k8s.io/kubernetes/vendor/k8s.io/klog/v2.(*loggingT).printDepth(0xc00146b270, 0x4e, 0x0, {0x0, 0x0}, 0x3b, {0xc000534b00, 0x1, 0x1})
/workspace/src/k8s.io/kubernetes/_output/dockerized/go/src/k8s.io/kubernetes/vendor/k8s.io/klog/v2/klog.go:735 +0x1ae
k8s.io/kubernetes/vendor/k8s.io/klog/v2.FatalDepth(...)
/workspace/src/k8s.io/kubernetes/_output/dockerized/go/src/k8s.io/kubernetes/vendor/k8s.io/klog/v2/klog.go:1518
k8s.io/kubernetes/vendor/k8s.io/kubectl/pkg/cmd/util.fatal({0xc00146b270, 0x4e}, 0xc0000c4bd0)
/workspace/src/k8s.io/kubernetes/_output/dockerized/go/src/k8s.io/kubernetes/vendor/k8s.io/kubectl/pkg/cmd/util/helpers.go:96 +0xc5
k8s.io/kubernetes/vendor/k8s.io/kubectl/pkg/cmd/util.checkErr({0x1fedfa0, 0xc0003a2378}, 0x1e79500)
/workspace/src/k8s.io/kubernetes/_output/dockerized/go/src/k8s.io/kubernetes/vendor/k8s.io/kubectl/pkg/cmd/util/helpers.go:191 +0x7d7
k8s.io/kubernetes/vendor/k8s.io/kubectl/pkg/cmd/util.CheckErr(...)
/workspace/src/k8s.io/kubernetes/_output/dockerized/go/src/k8s.io/kubernetes/vendor/k8s.io/kubectl/pkg/cmd/util/helpers.go:118
k8s.io/kubernetes/vendor/k8s.io/kubectl/pkg/cmd/create.NewCmdCreate.func1(0xc000123900, {0xc000204460, 0x0, 0x5})
/workspace/src/k8s.io/kubernetes/_output/dockerized/go/src/k8s.io/kubernetes/vendor/k8s.io/kubectl/pkg/cmd/create/create.go:118 +0x18a
k8s.io/kubernetes/vendor/github.com/spf13/cobra.(*Command).execute(0xc000123900, {0xc000204410, 0x5, 0x5})
/workspace/src/k8s.io/kubernetes/_output/dockerized/go/src/k8s.io/kubernetes/vendor/github.com/spf13/cobra/command.go:860 +0x5f8
k8s.io/kubernetes/vendor/github.com/spf13/cobra.(*Command).ExecuteC(0xc000122f00)
/workspace/src/k8s.io/kubernetes/_output/dockerized/go/src/k8s.io/kubernetes/vendor/github.com/spf13/cobra/command.go:974 +0x3bc
k8s.io/kubernetes/vendor/github.com/spf13/cobra.(*Command).Execute(...)
/workspace/src/k8s.io/kubernetes/_output/dockerized/go/src/k8s.io/kubernetes/vendor/github.com/spf13/cobra/command.go:902
k8s.io/kubernetes/vendor/k8s.io/component-base/cli.run(0xc000122f00)
/workspace/src/k8s.io/kubernetes/_output/dockerized/go/src/k8s.io/kubernetes/vendor/k8s.io/component-base/cli/run.go:146 +0x325
k8s.io/kubernetes/vendor/k8s.io/component-base/cli.RunNoErrOutput(...)
/workspace/src/k8s.io/kubernetes/_output/dockerized/go/src/k8s.io/kubernetes/vendor/k8s.io/component-base/cli/run.go:84
main.main()
_output/dockerized/go/src/k8s.io/kubernetes/cmd/kubectl/kubectl.go:30 +0x1e

goroutine 6 [chan receive]:
k8s.io/kubernetes/vendor/k8s.io/klog/v2.(*loggingT).flushDaemon(0x0)
/workspace/src/k8s.io/kubernetes/_output/dockerized/go/src/k8s.io/kubernetes/vendor/k8s.io/klog/v2/klog.go:1181 +0x6a
created by k8s.io/kubernetes/vendor/k8s.io/klog/v2.init.0
/workspace/src/k8s.io/kubernetes/_output/dockerized/go/src/k8s.io/kubernetes/vendor/k8s.io/klog/v2/klog.go:420 +0xfb

goroutine 17 [select]:
k8s.io/kubernetes/vendor/k8s.io/apimachinery/pkg/util/wait.BackoffUntil(0x73656d616e2d2d20, {0x1feb620, 0xc00002c000}, 0x1, 0xc000102360)
/workspace/src/k8s.io/kubernetes/_output/dockerized/go/src/k8s.io/kubernetes/vendor/k8s.io/apimachinery/pkg/util/wait/wait.go:167 +0x13b
k8s.io/kubernetes/vendor/k8s.io/apimachinery/pkg/util/wait.JitterUntil(0x7461647055202320, 0x12a05f200, 0x0, 0x20, 0x206e6f697461746f)
/workspace/src/k8s.io/kubernetes/_output/dockerized/go/src/k8s.io/kubernetes/vendor/k8s.io/apimachinery/pkg/util/wait/wait.go:133 +0x89
k8s.io/kubernetes/vendor/k8s.io/apimachinery/pkg/util/wait.Until(...)
/workspace/src/k8s.io/kubernetes/_output/dockerized/go/src/k8s.io/kubernetes/vendor/k8s.io/apimachinery/pkg/util/wait/wait.go:90
k8s.io/kubernetes/vendor/k8s.io/apimachinery/pkg/util/wait.Forever(0x6176206568742064, 0x20796d272065756c)
/workspace/src/k8s.io/kubernetes/_output/dockerized/go/src/k8s.io/kubernetes/vendor/k8s.io/apimachinery/pkg/util/wait/wait.go:81 +0x28
created by k8s.io/kubernetes/vendor/k8s.io/component-base/logs.InitLogs
/workspace/src/k8s.io/kubernetes/_output/dockerized/go/src/k8s.io/kubernetes/vendor/k8s.io/component-base/logs/logs.go:179 +0x85

goroutine 38 [IO wait]:
internal/poll.runtime_pollWait(0x7fbeaade5958, 0x72)
/usr/local/go/src/runtime/netpoll.go:234 +0x89
internal/poll.(*pollDesc).wait(0xc00018a280, 0xc00019d200, 0x0)
/usr/local/go/src/internal/poll/fd_poll_runtime.go:84 +0x32
internal/poll.(*pollDesc).waitRead(...)
/usr/local/go/src/internal/poll/fd_poll_runtime.go:89
internal/poll.(*FD).Read(0xc00018a280, {0xc00019d200, 0x8e4, 0x8e4})
/usr/local/go/src/internal/poll/fd_unix.go:167 +0x25a
net.(*netFD).Read(0xc00018a280, {0xc00019d200, 0x80000002c, 0x2d00000009})
/usr/local/go/src/net/fd_posix.go:56 +0x29
net.(*conn).Read(0xc0004d4020, {0xc00019d200, 0x3fffd4003fffd3, 0xc00006d7f0})
/usr/local/go/src/net/net.go:183 +0x45
crypto/tls.(*atLeastReader).Read(0xc0003a25a0, {0xc00019d200, 0x0, 0x409e2d})
/usr/local/go/src/crypto/tls/conn.go:777 +0x3d
bytes.(*Buffer).ReadFrom(0xc0007cacf8, {0x1fe9460, 0xc0003a25a0})
/usr/local/go/src/bytes/buffer.go:204 +0x98
crypto/tls.(*Conn).readFromUntil(0xc0007caa80, {0x1fece40, 0xc0004d4020}, 0x40d0f4)
/usr/local/go/src/crypto/tls/conn.go:799 +0xe5
crypto/tls.(*Conn).readRecordOrCCS(0xc0007caa80, 0x0)
/usr/local/go/src/crypto/tls/conn.go:606 +0x112
crypto/tls.(*Conn).readRecord(...)
/usr/local/go/src/crypto/tls/conn.go:574
crypto/tls.(*Conn).Read(0xc0007caa80, {0xc00017c000, 0x1000, 0x200f6a0})
/usr/local/go/src/crypto/tls/conn.go:1277 +0x16f
bufio.(*Reader).Read(0xc000511560, {0xc000196820, 0x9, 0xc00006dcd8})
/usr/local/go/src/bufio/bufio.go:227 +0x1b4
io.ReadAtLeast({0x1fe9260, 0xc000511560}, {0xc000196820, 0x9, 0x9}, 0x9)
/usr/local/go/src/io/io.go:328 +0x9a
io.ReadFull(...)
/usr/local/go/src/io/io.go:347
k8s.io/kubernetes/vendor/golang.org/x/net/http2.readFrameHeader({0xc000196820, 0x9, 0xc00006dda0}, {0x1fe9260, 0xc000511560})
/workspace/src/k8s.io/kubernetes/_output/dockerized/go/src/k8s.io/kubernetes/vendor/golang.org/x/net/http2/frame.go:237 +0x6e
k8s.io/kubernetes/vendor/golang.org/x/net/http2.(*Framer).ReadFrame(0xc0001967e0)
/workspace/src/k8s.io/kubernetes/_output/dockerized/go/src/k8s.io/kubernetes/vendor/golang.org/x/net/http2/frame.go:498 +0x95
k8s.io/kubernetes/vendor/golang.org/x/net/http2.(*clientConnReadLoop).run(0xc00006df98)
/workspace/src/k8s.io/kubernetes/_output/dockerized/go/src/k8s.io/kubernetes/vendor/golang.org/x/net/http2/transport.go:2101 +0x130
k8s.io/kubernetes/vendor/golang.org/x/net/http2.(*ClientConn).readLoop(0xc0004de600)
/workspace/src/k8s.io/kubernetes/_output/dockerized/go/src/k8s.io/kubernetes/vendor/golang.org/x/net/http2/transport.go:1997 +0x6f
created by k8s.io/kubernetes/vendor/golang.org/x/net/http2.(*Transport).newClientConn
/workspace/src/k8s.io/kubernetes/_output/dockerized/go/src/k8s.io/kubernetes/vendor/golang.org/x/net/http2/transport.go:725 +0xac5`

scholzj Apr 14, 2022
Maintainer

Well, this suggests it does not like the certificate on our website:

I0414 14:18:16.676098 61033 helpers.go:237] Connection error: Get https://strimzi.io/install/latest?namespace=kafka: x509: certificate signed by unknown authority

The certificate is signed by Let's Encrypt and is fine on my laptop:

$ openssl s_client -connect strimzi.io:443 -servername strimzi.io --showcerts
CONNECTED(00000006)
depth=2 C = US, O = Internet Security Research Group, CN = ISRG Root X1
verify return:1
depth=1 C = US, O = Let's Encrypt, CN = R3
verify return:1
depth=0 CN = *.strimzi.io
verify return:1
---
Certificate chain
 0 s:CN = *.strimzi.io
   i:C = US, O = Let's Encrypt, CN = R3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
 1 s:C = US, O = Let's Encrypt, CN = R3
   i:C = US, O = Internet Security Research Group, CN = ISRG Root X1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
 2 s:C = US, O = Internet Security Research Group, CN = ISRG Root X1
   i:O = Digital Signature Trust Co., CN = DST Root CA X3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
---
Server certificate
subject=CN = *.strimzi.io

issuer=C = US, O = Let's Encrypt, CN = R3

---
No client certificate CA names sent
Peer signing digest: SHA256
Peer signature type: ECDSA
Server Temp Key: X25519, 253 bits
---
SSL handshake has read 4260 bytes and written 392 bytes
Verification: OK
---
New, TLSv1.3, Cipher is TLS_AES_256_GCM_SHA384
Server public key is 256 bit
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
Early data was not sent
Verify return code: 0 (ok)
---
---
Post-Handshake New Session Ticket arrived:
SSL-Session:
    Protocol  : TLSv1.3
    Cipher    : TLS_AES_256_GCM_SHA384
    Session-ID: 01ECA39C57CE27E08598EFE0035E542CAFC77A70FAA13F652CFE834880B566D4
    Session-ID-ctx:
    Resumption PSK: EDB7F65C6799A875D8148D7AFF897C24761F3E5B5B20CFB595E603CB0B07452EC6695086BAE0BE8EB95B31031147BC14
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    TLS session ticket lifetime hint: 86400 (seconds)
    TLS session ticket:
    0000 - 3a 81 f4 98 3b be 4d 62-9d a4 f0 f2 df c1 0b ef   :...;.Mb........
    0010 - 24 8f 70 36 0e 6a df c9-de b7 78 c1 92 9d 4a 02   $.p6.j....x...J.

    Start Time: 1649942681
    Timeout   : 7200 (sec)
    Verify return code: 0 (ok)
    Extended master secret: no
    Max Early Data: 0
---

So this is probably relates to some local configuration on your computer which does not trust Let's Encrypt or to some proxy or something like that. Hard to say for me I'm afraid.

You can download the installation YAMLs from the GitHub release and follow the docs to use them as an alternative I guess. Not sure if kubectl has any options to ignore the TLS error.

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Strimzi

error while installing strimzi #6679

Uh oh!

{{title}}

Uh oh!

Replies: 1 comment 3 replies

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Select a reply

Uh oh!

Strimzi

error while installing strimzi #6679

Uh oh!

shivajigoulikar Apr 13, 2022

Replies: 1 comment · 3 replies

Uh oh!

scholzj Apr 13, 2022 Maintainer

Uh oh!

shivajigoulikar Apr 13, 2022 Author

Uh oh!

shivajigoulikar Apr 14, 2022 Author

Uh oh!

scholzj Apr 14, 2022 Maintainer

shivajigoulikar
Apr 13, 2022

Replies: 1 comment 3 replies

scholzj
Apr 13, 2022
Maintainer

shivajigoulikar Apr 13, 2022
Author

shivajigoulikar Apr 14, 2022
Author

scholzj Apr 14, 2022
Maintainer