Fix a "certificate signed by an unknown authority" error when connecting Comply to Puppet Enterprise

After installing Comply, you generate certificates in Puppet Enterprise. When you try to connect Comply with Puppet Enterprise, you get a certificate signed by an unknown authority error.

Version and installation information

Comply version: 2.x

Solution

With regard to communication between Comply and PE, any issues with the Puppet Enterprise CA certificate result in an error on the Comply UI. To fix this error, confirm that the certificates are valid. If they are, restart the pod.

Complete these steps on the control pane node.

1. Verify that the certificates are valid by using the certificates to do a successful status API query by running: kubectl exec $(kubectl get pod -l app=kotsadm -o jsonpath="{.items[0].metadata.name}") -- /bin/sh -c 'curl --SI <HOSTNAME>'

   Exit code 0 is a successful query.

2. Restart the pod by running kubectl rollout restart deployment kotsadm