opencost: tls failed to verify certificate x509 certificate signed by unknown authority

[rabahbrahami]

I encounter a problem with the configuration of opencost with the configuration of a prometheus external which is exposed in http or https, I tried with http but there is a redirection to https which is done automatically.

  prometheus:
    external:
      # -- Use external Prometheus (eg. Grafana Cloud)
      enabled: true
      # -- External Prometheus url
      url: "http://prometheus.....com"
    internal:
      enabled: false

Error:

tls: failed to verify certificate: x509: certificate signed by unknown authority'

The only solution is to have the possibility to put InsecureSkipVerify in input as an environment variable since for the moment the values cannot be overloaded.

[mattray]

Do you have a proposed solution you'd like to see in the Helm chart? I'm sure we'd merge a proper PR.

[charalamm]

Please note that I am new to kubernetes so I dont know if there are side effects to this possible solution
For me it got solved when I deleted prometheus-grafana-kube-pr-admission validating webhook config. Of course it might be a different webhook in your case.

[joyartoun]

We are also experiencing a problem with this. We are using a custom signed certificate in openshift (where prometheus is exposed via a openshift route), there is a way to inject the CA into a pod/container but the problem is that the helm chart seems to only have the variable extraVolumes, opencost.exporter.extraVolumeMounts and opencost.ui.extraVolumeMounts, thus, no way to add volume mounts for the opencost container specifically.

EDIT: just realized that the opencost.exporter.extraVolumeMount can actually be used to add volumemounts, maybe should rename the value or create a new one

[mattray]

@joyartoun I'm not sure I follow, do you have a fix for the initial issue that just requires better documentation of an existing variable?

[github-actions]

This issue has been marked as stale because it has been open for 180 days with no activity. Please remove the stale label or comment or this issue will be closed in 5 days.

[github-actions]

This issue was closed because it has been inactive for 185 days with no activity.