spectrum publish x509: certificate signed by unknown authority

[chenxinma]

Hi , I am trying to build a groovy integration using kamel tool.

kamel install -n data \ --cluster-type=Kubernetes \ --build-publish-strategy=Spectrum \ --maven-settings=configmap:camel-k-maven-config/settings.xml \ --registry-insecure=true \ --registry private.registry.inner \ --registry-auth-server=private.registry.inner \ --registry-auth-username=admin \ --registry-auth-password=abc123 \ --save

I got the following error :
spectrum - 2021/02/12 07:41:12 Pushing image private.registry.inner/data/camel-k-kit-c0j31vk2u1caq630ijl0:12380621 (insecure=true)... {"level":"info","ts":1613115674.9215019,"logger":"camel-k.builder","msg":"step failed with error: Get \"https://private.registry.inner/v2/\": x509: certificate signed by unknown authority","step":"github.com/apache/camel-k/pkg/builder/spectrum/Publisher","phase":40,"name":"kit-c0j31vk2u1caq630ijl0","task":"builder"}

Can anyone guess?

[chenxinma]

I had added the ca.
echo -n | openssl s_client -showcerts -connect private.registry.inner:443 2>/dev/null | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' >> /usr/local/share/ca-certificates/registry.crt
update-ca-certificates

[chenxinma]

solved with make a new image from camel-k:1.3.1 and add
echo -n | openssl s_client -showcerts -connect private.registry.inner:443 2>/dev/null | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' >> /usr/local/share/ca-certificates/registry.crt update-ca-certificates
into the Dockfile.
set the --operator-image with the new image.