[atomic-devel] Cert fail with kubernetes-ansible

[Josh Berkus <jberkus redhat com>]

Hey all,

I'm using Jason Brooks' fork of kubernetes-ansible to configure a Fedora
Atomic 23 cluster, and get this failure on configuring the master:

failed: [192.168.1.100] => {"changed": true, "cmd":
["/usr/local/libexec/kubernetes/make-ca-cert.sh"], "delta":
"0:00:00.357547", "end": "2016
-01-27 20:46:42.600622", "rc": 60, "start": "2016-01-27
20:46:42.243075", "warnings": []}
stderr: curl: (60) Peer's Certificate has expired.
More details here: http://curl.haxx.se/docs/sslcerts.html

Changing this line to use --insecure seems to have fixed the issue, but
that's not a real fix, of course:

curl --insecure -sSL -O
https://storage.googleapis.com/kubernetes-release/easy-rsa/easy-rsa.tar.gz

Thoughts/fixes?

Seems odd that nobody else has run into this; make_ca_cert is identical
to upstream.

-- 
--
Josh Berkus
Project Atomic
Red Hat OSAS