Habor apply change failed with certificate error.

Products

• VMware Tanzu Kubernetes Grid Integrated Edition

Issue/Introduction

If Habor is configured with UAA OIDC then after rotating the TKGI api certificate, applying change on Habror will fail with certifcate error.

This is applicable if TKGI API certificate is signed by custom CA. 

Environment

TKGI with Habror
Habor configured with OIDC UAA

Cause

If Habor is using OIDC, TKGI certificate is required in the Habor VM.

Resolution

Update the TKGI certifcate under Bosh > security > trusted certifcate.

Then apply change again on the Bosh and Habror tile