radius: Unable run sample app. Redis recipe failed to download. certificate signed by unknown authority

Bug information

Steps to reproduce (required)

rad run app.bicep from sample app created by rad init and copying resource for redis as per https://docs.radapp.io/getting-started/

Observed behavior (required)

Getting below error

{
  "code": "DeploymentFailed",
  "message": "At least one resource deployment operation failed. Please see the details for the specific operation that failed.",
  "target": "/planes/radius/local/resourceGroups/default/providers/Microsoft.Resources/deployments/rad-deploy-fade5be7-828e-4fbd-98f5-c60ccbb52a91",
  "details": [
    {
      "code": "ResourceDeploymentFailure",
      "message": "Failed",
      "target": "/planes/radius/local/resourceGroups/default/providers/Applications.Datastores/redisCaches/db",
      "details": [
        {
          "code": "RecipeDownloadFailed",
          "message": "code RecipeLanguageFailure: err failed to fetch repository from the path \"ghcr.io/radius-project/recipes/local-dev/rediscaches:0.28\": Head \"https://ghcr.io/v2/radius-project/recipes/local-dev/rediscaches/manifests/0.28\": tls: failed to verify certificate: x509: certificate signed by unknown authority",
          "details": [
            {
              "code": "RecipeLanguageFailure",
              "message": "failed to fetch repository from the path \"ghcr.io/radius-project/recipes/local-dev/rediscaches:0.28\": Head \"https://ghcr.io/v2/radius-project/recipes/local-dev/rediscaches/manifests/0.28\": tls: failed to verify certificate: x509: certificate signed by unknown authority"
            }
          ]
        }
      ]
    }
  ]
}

Desired behavior (required)

Apps should be deployed and the UI should be accessible

Workaround (optional)

Tried to setup SSL certificate as per the issue https://github.com/radius-project/radius/issues/6532.

Tried setting certificate in minikube using https://minikube.sigs.k8s.io/docs/handbook/untrusted_certs/#untrusted-root-certificates. Tried to setup certificate using rad install kubernetes --reinstall --set-file global.rootCA.cert=<your cert file location>

Still getting same error. I am behind corporate firewall

System information

rad Version (required)

RELEASE VERSION BICEP COMMIT 0.28.0 v0.28.0 0.28.0 c7217b6f661a790053c1b65ff7972a0c5be33908

Operating system (required)

macOS Ventura 13.6, M1 Pro chip

Additional context

I am behind corporate firewall and trying to deploy to minikube running on my work laptop

AB#10773

About this issue

  • Original URL
  • State: closed
  • Created 7 months ago
  • Comments: 17 (11 by maintainers)

Commits related to this issue

Most upvoted comments

Its working now with the workaround suggested. Tried to use both Mongo and Redis and both are working. Thanks a lot.