Mender with helm chart: deployments service fails to start due to certificate issue

General Discussions
, ,
1

Hi all,

I’m using the v3.4.0 helm chart obtained GitHub - mendersoftware/mender-helm at 3.4.0

I used all the recommended settings, and generated self signed certificates as specified on the page,
but it seems that the cert/key generated for the api-gateway are not supported by the underlying Golang version validating the cert.

The deployment service has the following error:
caused by: Put "https://mydomain.com/mender-artifact-storage": x509: certificate relies on legacy Common Name field, use SANs instead

I tried generating the crt and key like this guide Create self-signed SSL certificate with SubjectAltName(SAN) · GitHub

And now deployments service is failing with:
caused by: Put "https://mydomain.com/mender-artifact-storage": x509: certificate signed by unknown authority

Anyone has any idea how to work around this?

EDIT:
I realize this is similar to “menderproduction_mender-deployments_1” keeps restarting on self-hosted mender server

2

tl;dr what I’m looking for is a flag that will make deployments service ignore ssl certificate errors, since the certificate is self-signed (like the helm-chart guide suggests)