Skip to content

Nextcloud cronjobs fail on master ci droplet due to invalid cert

❯ kc -n oas-apps get pods | grep nc-nextcloud-cron               
nc-nextcloud-cron-27126095-s7pms                0/1     Error     0          29m
nc-nextcloud-cron-27126095-mkct2                0/1     Error     0          29m
nc-nextcloud-cron-27126095-k4bxk                0/1     Error     0          28m
nc-nextcloud-cron-27126095-x7p5d                0/1     Error     0          28m
nc-nextcloud-cron-27126095-4s62q                0/1     Error     0          27m
nc-nextcloud-cron-27126095-sfrgr                0/1     Error     0          24m
nc-nextcloud-cron-27126095-m84wp                0/1     Error     0          18m
nc-nextcloud-cron-27126110-tcvhl                0/1     Error     0          12m
nc-nextcloud-cron-27126110-hhs95                0/1     Error     0          12m
nc-nextcloud-cron-27126110-rfbfh                0/1     Error     0          12m
nc-nextcloud-cron-27126110-925s2                0/1     Error     0          11m
nc-nextcloud-cron-27126110-llgxx                0/1     Error     0          10m
nc-nextcloud-cron-27126110-42bhg                0/1     Error     0          5m19s

logs from last failing pod:

❯ kc -n oas-apps logs nc-nextcloud-cron-27126110-42bhg
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
curl: (60) SSL certificate problem: unable to get local issuer certificate
More details here: https://curl.haxx.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.

Cert is issued from LE staging:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            fa:4d:dd:69:d2:13:45:ba:3b:4f:e5:ec:52:26:14:e6:96:43
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = US, O = (STAGING) Let's Encrypt, CN = (STAGING) Artificial Apricot R3
        Validity
            Not Before: Jul 29 12:32:45 2021 GMT
            Not After : Oct 27 12:32:43 2021 GMT
        Subject: CN = files.master.ci.openappstack.net
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information