Sample Accelerators installation failed during TAP installation with error "OCIRepositoryResolutionFailed"

Products

• VMware Tanzu Application Platform

Issue/Introduction

When deploy TAP v1.12 with sample accelerators(default true), all accelerators are reported as not ready state with reason "OCIRepositoryResolutionFailed". 

kubectl get accelerators.accelerator.apps.tanzu.vmware.com -A
NAMESPACE            NAME                            READY   REASON                          AGE
accelerator-system   angular-frontend                False   OCIRepositoryResolutionFailed   12h
accelerator-system   appsso-starter-java             False   OCIRepositoryResolutionFailed   12h
accelerator-system   csharp-rest-service             False   OCIRepositoryResolutionFailed   12h
accelerator-system   csharp-weatherforecast          False   OCIRepositoryResolutionFailed   12h
...

The detailed output of each accelerator is like: 

Status:
  Address:
    URL:  http://angular-frontend.accelerator-system.svc.cluster.local/invocations
  Artifact:
    Message:  failed to determine artifact digest: Get "https://harbor.###.###/v2/": tls: failed to verify certificate: x509: certificate signed by unknown authority
    Ready:    false

Environment

Tanzu Application Platform v1.12

Cause

TAP distribution of Flux CD source controller does not support shared.ca_cert_data in tap-values.yml. Then when using OCIRepository to deploy sample accelerators from private registry, the server certificate can not be verified.

Resolution

Please disable sample accelerators installation during TAP installation, in tap-values.yml, set samples.include to false and update tap package. 

accelerator:
  samples:
    include: false

Then install sample accelerators manually with command

kubectl apply -n accelerator-system -f https://raw.githubusercontent.com/vmware-tanzu/application-accelerator-samples/refs/heads/main/sample-accelerators-tap-1.12.0.yaml