Failed to pull argocd-repo-server image due to certificates issue (certificate is valid for fqdn,*.fqdn,not localhost)

News Knowledge Base
1

N/A

Issue Description:

When upgrading AS to AS23.10.* , during fabric upgrade, sometimes it is not able to pull the image for argocd-repo-servers, on checking the logs , "x509: certificate is valid for fqdn,*.fqdn xxxxx not localhost" is noticed.


Resolution:

  1. Check the below file on the server nodes
  • /etc/rancher/rke2/registries.yaml
  1. Notice that under the bottom part for localhost:30071 , the "tls: insecure_skip_verify: true " is missing
  2. It should now be possible to make a copy of that file, and edit the file. Here is a reference .