#1 Global Leader in Data Resilience
#1 Global Leader in Data Resilience
BACK TO KB LIST

How to Configure Veeam Kasten for Kubernetes Dashboard to Use a New Certificate

KB ID: 4611
Product: Veeam Kasten for Kubernetes
Published: 2024-06-12
Last Modified: 2024-06-12
mailbox
Get weekly article updates
By subscribing, you are agreeing to have your personal information managed in accordance with the terms of Veeam's Privacy Notice.
This site is protected by hCaptcha and its Privacy Policy and Terms of Service apply except as noted in our Privacy Policy.

Cheers for trusting us with the spot in your mailbox!

Now you’re less likely to miss what’s been brewing in our knowledge base with this weekly digest

error icon

Oops! Something went wrong.

Please, try again later.

Purpose

This article documents how to troubleshoot and replace the certificate used by the Veeam Kasten for Kubernetes Dashboard.

Scenario Example

The Veeam Kasten for Kubernetes Dashboard becomes inaccessible due to an expired certificate, resulting in an HTTP ERROR 401, indicating a lack of valid authentication credentials for the requested resource.

Solution

Troubleshooting

Encountering an HTTP ERROR 401 indicates that the request lacks the necessary authentication credentials to access the resource. Debug logs reveal an SSL verification failure with the following error message: "x509: certificate signed by unknown authority." This error strongly suggests a failure in the OIDC configuration.
 
Use k10tools to debug the authentication issue: 

./k10tools debug auth

Resolution Steps

To resolve the issue, follow these steps:

  1. Create a ConfigMap that contains the new certificate file.
kubectl --namespace kasten-io create configmap custom-ca-bundle-store --from-file=custom-ca-bundle.pem -o yaml --dry-run=client > custom-ca-bundle-store.yaml
  1. Patch the existing ConfigMap with the new certificate information.
kubectl patch configmap custom-ca-bundle-store --namespace kasten-io --patch-file custom-ca-bundle-store.yaml
  1. Restart the deployment in the 'kasten-io' namespace to apply the changes.
kubectl rollout restart deployment -n kasten-io
By completing these steps, you will ensure that the changes take effect and allow you to access the Veeam Kasten for Kubernetes Dashboard with the updated certificate.
To submit feedback regarding this article, please click this link: Send Article Feedback
To report a typo on this page, highlight the typo with your mouse and press CTRL + Enter.

Spelling error in text

This site is protected by hCaptcha and its Privacy Policy and Terms of Service apply except as noted in our Privacy Policy.
Thank you!

Thank you!

Your feedback has been received and will be reviewed.

Oops! Something went wrong.

Please, try again later.

You have selected too large block!

Please try select less.

KB Feedback/Suggestion

This form is only for KB Feedback/Suggestions, if you need help with the software open a support case
By submitting, you are agreeing to have your personal information managed in accordance with the terms of Veeam's Privacy Notice.
This site is protected by hCaptcha and its Privacy Policy and Terms of Service apply except as noted in our Privacy Policy.
Verify your email to continue your product download
We've sent a verification code to:
  • Incorrect verification code. Please try again.
An email with a verification code was just sent to
Didn't receive the code? Click to resend in sec
Didn't receive the code? Click to resend
Start using Veeam:
Download the product
&
Activate the license key
Thank you!

Thank you!

Your feedback has been received and will be reviewed.

error icon

Oops! Something went wrong.

Please, try again later.