I’m having a problem starting the Conjur Operator configurator container on Openshift:
" INFO: 2024/11/04 15:03:06.000955 authenticator.go:84: CAKC040 Authenticating as user ‘host/conjur-follower’
ERROR: 2024/11/04 15:03:06.029198 authenticator.go:185: CAKC029 Received invalid response to certificate signing request. Reason: status code 401,
ERROR: 2024/11/04 15:03:06.029237 authenticator.go:271: CAKC015 Login failed
ERROR: 2024/11/04 15:03:06.029252 main.go:49: CAKC016 Failed to authenticate
ERROR: 2024/11/04 15:03:06.029266 main.go:72: CAKC031 Retransmission backoff exhausted
[configure-follower] INFO: Parsing Conjur token…
/usr/bin/configure-follower: line 193: /run/conjur/access-token: No such file or directory
[configure-follower] ERROR: API token is invalid (empty)!"
Note: I configured both the Operator and the Conjur Cluster using the official documentation (Version: 13.4):
I’m not sure where the problem might be generating the error, whether it’s a certificate or a problem with TLS or policy. I can send you more data for viewing.
Thank you for that. It’s clear from these logs that there is a certificate related error here. In particular, from the first snippet, it seems that Conjur is unable to verify the certificate used by the Kubernetes API due to it being self-signed instead of being signed by a trusted root CA.
If further troubleshooting is necessary, I would recommend submitting a support case.