[JIRA] (JENKINS-58950) When trying to deploy with v2.0.0 of this plugin got error unable to find valid certification path to requested target.

sm1leua@ya.ru (JIRA)

unread,

Aug 15, 2019, 9:51:03 AM8/15/19

to jenkinsc...@googlegroups.com

Mikhail K. created an issue

Jenkins /

JENKINS-58950

When trying to deploy with v2.0.0 of this plugin got error unable to find valid certification path to requested target.

Issue Type:	Bug
Assignee:	Unassigned
Components:	core
Created:	2019-08-15 13:50
Environment:	Jenkins v2.176.2 ace-editor 1.1 true allure-jenkins-plugin 2.28.1 true ansicolor 0.6.2 true ant 1.9 true antisamy-markup-formatter 1.5 true apache-httpcomponents-client-4-api 4.5.5-3.0 true authentication-tokens 1.3 true authorize-project 1.3.0 true azure-commons 1.0.4 true bouncycastle-api 2.17 true branch-api 2.5.4 true build-pipeline-plugin 1.5.8 true build-timeout 1.19 true built-on-column 1.1 true cloudbees-folder 6.9 true command-launcher 1.3 true conditional-buildstep 1.3.6 true config-file-provider 3.6.2 true credentials 2.2.1 true credentials-binding 1.20 true dashboard-view 2.11 true display-url-api 2.3.2 true docker-commons 1.15 true docker-java-api 3.0.14 true docker-plugin 1.1.7 true docker-slaves 1.0.7 true docker-workflow 1.19 true durable-task 1.30 true email-ext 2.66 true embeddable-build-status 2.0.2 true envinject 2.2.0 true envinject-api 1.6 true external-monitor-job 1.7 true git 3.11.0 true git-client 2.8.0 true git-server 1.8 true global-variable-string-parameter 1.2 true handlebars 1.1.1 true icon-shim 2.0.3 true jackson2-api 2.9.9.1 true javadoc 1.5 true jdk-tool 1.3 true jenkins-multijob-plugin 1.32 true jquery 1.12.4-0 true jquery-detached 1.2.1 true jsch 0.1.55.1 true junit 1.28 true kubernetes 1.18.1 true kubernetes-cd 1.0.0 true kubernetes-cli 1.7.0 true kubernetes-credentials 0.4.1 true ldap 1.20 true locale 1.4 true lockable-resources 2.5 true mailer 1.24 true mapdb-api 1.0.9.0 true matrix-auth 2.4.2 true matrix-project 1.14 true maven-plugin 3.4 true mercurial 2.8 true momentjs 1.1.1 true pam-auth 1.5.1 true parameterized-trigger 2.35.2 true pipeline-build-step 2.9 true pipeline-graph-analysis 1.10 true pipeline-input-step 2.10 true pipeline-milestone-step 1.3.1 true pipeline-model-api 1.3.9 true pipeline-model-declarative-agent 1.1.1 true pipeline-model-definition 1.3.9 true pipeline-model-extensions 1.3.9 true pipeline-rest-api 2.12 true pipeline-stage-step 2.3 true pipeline-stage-tags-metadata 1.3.9 true pipeline-stage-view 2.12 true pipeline-utility-steps 2.3.0 true plain-credentials 1.5 true promoted-builds 3.3 true publish-over 0.22 true publish-over-ftp 1.15 true publish-over-ssh 1.20.1 true rancher 1.0.13-SNAPSHOT (private-12/31/2018 16:31-yunlong) true rebuild 1.31 true resource-disposer 0.13 true run-condition 1.2 true scm-api 2.6.3 true script-security 1.62 true slack 2.29 true slack-uploader 1.7 true ssh 2.6.1 true ssh-credentials 1.17.1 true ssh-slaves 1.30.1 true ssh-steps 2.0.0 true structs 1.20 true subversion 2.12.2 true throttle-concurrents 2.0.1 true timestamper 1.10 true token-macro 2.8 true variant 1.3 true windows-slaves 1.4 true workflow-aggregator 2.6 true workflow-api 2.36 true workflow-basic-steps 2.18 true workflow-cps 2.73 true workflow-cps-global-lib 2.15 true workflow-durable-task-step 2.33 true workflow-job 2.33 true workflow-multibranch 2.21 true workflow-scm-step 2.9 true workflow-step-api 2.20 true workflow-support 3.3 true ws-cleanup 0.37 true
Labels:	plugin deploy kubernetes-cd-plugin
Priority:	Major
Reporter:	Mikhail K.

When i updated plugin to v2, i always getting an error:

```
{{ERROR: ERROR: java.lang.RuntimeException: io.kubernetes.client.ApiException: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
hudson.remoting.ProxyException: java.lang.RuntimeException: io.kubernetes.client.ApiException: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
at com.microsoft.jenkins.kubernetes.wrapper.ResourceManager.handleApiExceptionExceptNotFound(ResourceManager.java:140)
at com.microsoft.jenkins.kubernetes.wrapper.V1ResourceManager$DeploymentUpdater.getCurrentResource(V1ResourceManager.java:191)
at com.microsoft.jenkins.kubernetes.wrapper.V1ResourceManager$DeploymentUpdater.getCurrentResource(V1ResourceManager.java:179)
at com.microsoft.jenkins.kubernetes.wrapper.ResourceManager$ResourceUpdater.createOrApply(ResourceManager.java:87)
at com.microsoft.jenkins.kubernetes.wrapper.KubernetesClientWrapper.handleResource(KubernetesClientWrapper.java:182)
at com.microsoft.jenkins.kubernetes.wrapper.KubernetesClientWrapper.apply(KubernetesClientWrapper.java:149)
at com.microsoft.jenkins.kubernetes.command.DeploymentCommand$DeploymentTask.doCall(DeploymentCommand.java:265)
at com.microsoft.jenkins.kubernetes.command.DeploymentCommand$DeploymentTask.call(DeploymentCommand.java:219)
at com.microsoft.jenkins.kubernetes.command.DeploymentCommand$DeploymentTask.call(DeploymentCommand.java:202)
at hudson.FilePath.act(FilePath.java:1163)
at com.microsoft.jenkins.kubernetes.command.DeploymentCommand.execute(DeploymentCommand.java:164)
at com.microsoft.jenkins.kubernetes.command.DeploymentCommand.execute(DeploymentCommand.java:52)
at com.microsoft.jenkins.azurecommons.command.CommandService.runCommand(CommandService.java:88)
at com.microsoft.jenkins.azurecommons.command.CommandService.execute(CommandService.java:96)
at com.microsoft.jenkins.azurecommons.command.CommandService.executeCommands(CommandService.java:75)
at com.microsoft.jenkins.azurecommons.command.BaseCommandContext.executeCommands(BaseCommandContext.java:77)
at com.microsoft.jenkins.kubernetes.KubernetesDeploy.perform(KubernetesDeploy.java:42)
at com.microsoft.jenkins.azurecommons.command.SimpleBuildStepExecution.run(SimpleBuildStepExecution.java:54)
at com.microsoft.jenkins.azurecommons.command.SimpleBuildStepExecution.run(SimpleBuildStepExecution.java:35)
at org.jenkinsci.plugins.workflow.steps.SynchronousNonBlockingStepExecution.lambda$start$0(SynchronousNonBlockingStepExecution.java:47)
at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511)
at java.util.concurrent.FutureTask.run(FutureTask.java:266)
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
at java.lang.Thread.run(Thread.java:748)
Caused by: hudson.remoting.ProxyException: io.kubernetes.client.ApiException: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
at io.kubernetes.client.ApiClient.execute(ApiClient.java:805)
at io.kubernetes.client.apis.AppsV1Api.readNamespacedDeploymentWithHttpInfo(AppsV1Api.java:6940)
at io.kubernetes.client.apis.AppsV1Api.readNamespacedDeployment(AppsV1Api.java:6922)
at com.microsoft.jenkins.kubernetes.wrapper.V1ResourceManager$DeploymentUpdater.getCurrentResource(V1ResourceManager.java:188)
... 23 more
Caused by: hudson.remoting.ProxyException: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
at sun.security.ssl.Alerts.getSSLException(Alerts.java:192)
at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1946)
at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:316)
at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:310)
at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1639)
at sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:223)
at sun.security.ssl.Handshaker.processLoop(Handshaker.java:1037)
at sun.security.ssl.Handshaker.process_record(Handshaker.java:965)
at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1064)
at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1367)
at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1395)
at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1379)
at com.squareup.okhttp.internal.io.RealConnection.connectTls(RealConnection.java:192)
at com.squareup.okhttp.internal.io.RealConnection.connectSocket(RealConnection.java:149)
at com.squareup.okhttp.internal.io.RealConnection.connect(RealConnection.java:112)
at com.squareup.okhttp.internal.http.StreamAllocation.findConnection(StreamAllocation.java:184)
at com.squareup.okhttp.internal.http.StreamAllocation.findHealthyConnection(StreamAllocation.java:126)
at com.squareup.okhttp.internal.http.StreamAllocation.newStream(StreamAllocation.java:95)
at com.squareup.okhttp.internal.http.HttpEngine.connect(HttpEngine.java:281)
at com.squareup.okhttp.internal.http.HttpEngine.sendRequest(HttpEngine.java:224)
at com.squareup.okhttp.Call.getResponse(Call.java:286)
at com.squareup.okhttp.Call$ApplicationInterceptorChain.proceed(Call.java:243)
at com.squareup.okhttp.Call.getResponseWithInterceptorChain(Call.java:205)
at com.squareup.okhttp.Call.execute(Call.java:80)
at io.kubernetes.client.ApiClient.execute(ApiClient.java:801)
... 26 more
Caused by: hudson.remoting.ProxyException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:397)
at sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:302)
at sun.security.validator.Validator.validate(Validator.java:262)
at sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:324)
at sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:229)
at sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:124)
at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1621)
... 46 more
Caused by: hudson.remoting.ProxyException: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
at sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.java:141)
at sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:126)
at java.security.cert.CertPathBuilder.build(CertPathBuilder.java:280)
at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:392)
... 52 more}}