swarm.autonomic.zone cert expired #5

New Issue

kawaiipunk · 2020-09-02T13:00:49Z

kawaiipunk commented

2020-09-02 13:00:49 +00:00

Registry credentials not provided. Guest mode enabled.
+ /usr/local/bin/docker version
Client: Docker Engine - Community
 Version:           19.03.8
 API version:       1.40
 Go version:        go1.12.17
 Git commit:        afacb8b7f0
 Built:             Wed Mar 11 01:22:56 2020
 OS/Arch:           linux/amd64
 Experimental:      false
error during connect: Get https://swarm.autonomic.zone:2376/v1.40/version: x509: certificate signed by unknown authority (possibly because of "crypto/rsa: verification error" while trying to verify candidate authority certificate "test-ca")
time="2020-09-02T12:58:56Z" level=fatal msg="exit status 1"

https://drone.autonomic.zone/kawaiipunk/walkaway-wiki/34/1/3

``` Registry credentials not provided. Guest mode enabled. + /usr/local/bin/docker version Client: Docker Engine - Community Version: 19.03.8 API version: 1.40 Go version: go1.12.17 Git commit: afacb8b7f0 Built: Wed Mar 11 01:22:56 2020 OS/Arch: linux/amd64 Experimental: false error during connect: Get https://swarm.autonomic.zone:2376/v1.40/version: x509: certificate signed by unknown authority (possibly because of "crypto/rsa: verification error" while trying to verify candidate authority certificate "test-ca") time="2020-09-02T12:58:56Z" level=fatal msg="exit status 1" ``` https://drone.autonomic.zone/kawaiipunk/walkaway-wiki/34/1/3

decentral1se was assigned by kawaiipunk

2020-09-02 13:00:53 +00:00

decentral1se commented

2020-09-03 13:25:18 +00:00

Ah shit, right, this is because I have the new certs (that I refreshed a few days back) setup under the autonomic-cooperative namespace in the drone config and not under yours. The kawaiipunk namespace doesn't have access to the new ones.

Practically speaking, this means doing something like this https://git.autonomic.zone/autonomic-cooperative/infrastructure/src/branch/master/scripts/dockertls.sh#L29.

Will get to this when have a bitta time. Other fix is to move it under the autonomic-cooperative namespace.

Ah shit, right, this is because I have the new certs (that I refreshed a few days back) setup under the autonomic-cooperative namespace in the drone config and not under yours. The kawaiipunk namespace doesn't have access to the new ones. Practically speaking, this means doing something like this https://git.autonomic.zone/autonomic-cooperative/infrastructure/src/branch/master/scripts/dockertls.sh#L29. Will get to this when have a bitta time. Other fix is to move it under the autonomic-cooperative namespace.

decentral1se commented

2020-09-03 13:26:16 +00:00

Maintaining the docker daemon certs for the "deploy to swarm" thing is a bit of a pain so far. Haven't figured out how to auto-refresh them and update the places where those certs need to be loaded. Maybe there is a better approach.