Kubeflow 1.0 on AKS: issue with SSL certificate

[David NOEL]

Hello everyone!

I installed Kubeflow 1.0 on Kubernetes 1.16.15 (with Azure) and I have an issue with SSL certificate when trying to install pip package in Jupiter Notebook. The same issue also appear when trying to install directly the package from the docker container used for the Notebook Server:

In order to provide more context about the mentioned issues, here are attached some outputs that contain the errores mentioned within. Issues found during installation of ‘nose’ package

If we try:

pip install --index-url=https://pypi.python.org/simple/ nose

Output is:

WARNING: Certificate did not match expected hostname: pypi.python.org. WARNING: Retrying (Retry(total=3, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError Could not fetch URL https://pypi.python.org/simple/nose/: There was a problem confirming the ssl certificate: HTTPSConnectionPool(host='pypi.python.org', port=443): Max retries exceeded with url: /simple/nose/ ERROR: Could not find a version that satisfies the requirement nose (from versions: none) ERROR: No matching distribution found for nose Could not fetch URL https://pypi.python.org/simple/pip/: There was a problem confirming the ssl certificate: HTTPSConnectionPool(host='pypi.python.org', port=443): Max retries exceeded with url: /simple/pip/

Similar issue also happen using curl:

! curl https://pypi.org

Output:

curl: (51) SSL: no alternative certificate subject name matches target host name 'pypi.org'

We tried to ignore the SSL verification using

pip install --trusted-host pypi.org --trusted-host files.pythonhosted.org

But is also raise an error:

ERROR: Could not find a version that satisfies the requirement nose (from versions: none) ERROR: No matching distribution found for nose

I dont know where to start to solve this... Any help would be welcome!

Thanks a lot in advance!

[David NOEL]

Hi,

With the last 1.2 version I have the same issue. The SSL certificate that is used for the outbound traffic in the Notebook pods seems to have a problem. Any idea how I could change it? 

Thanks