Symptoms

When you login the Primehub service, you will see certificate has expired in the web UI and the Primehub platform cannot be used.

Diagnosing the problem

If you see the watcher, graphql log contains certificate has expired error, then you can follow the step to solve the problem.

kubectl -n hub logs primehub-watcher-56d796d54b-ldllg

• Log information

kubectl -n hub logs primehub-graphql-5c69d7f97-f949f

• log information

Resolving the problem

• Method: By pass certificate setting.

  • Modify primehub-watcher deploy setting and add environment variable:

    kubectl -n hub edit deploy primehub-watcher
    

    - name: NODE_TLS_REJECT_UNAUTHORIZED
      value: "0"
    

  • Modify primehub-graphql deploy setting and add environment variable:

    kubectl -n hub edit deploy primehub-graphql
    

    - name: NODE_TLS_REJECT_UNAUTHORIZED
      value: "0"
    

  • Modify primehub-console deploy setting and add environment variable:

    kubectl -n hub edit deploy primehub-console
    

    - name: NODE_TLS_REJECT_UNAUTHORIZED
      value: "0"