Why am I unable to verify certificate in ITRS Analytics?

Issue Copied

The following error message is displayed in the obcerv-operator container log (operator.log):

Internal error occurred: failed calling webhook "validating-webhook.obcerv.itrsgroup.com": failed to call webhook: Post "[https://obcerv-operator-webhook.gateway.svc:443/validate?timeout=30s":](https://obcerv-operator-webhook.gateway.svc:443/validate?timeout=30s":) tls: failed to verify certificate: x509: certificate signed by unknown authority.

Resolution Copied

This error occurs when the cert-manager is not installed in your ITRS Analytics cluster. This is required for issuing and managing TLS certificates.

Run the following command to determine whether cert-manager is installed in your cluster.

helm list --all-namespaces

This should show that the cert-manager is deployed:

Otherwise, you need to install the cert-manager.

Ensure that the cert-manager is installed before running other ITRS Analytics operator services.

Additionally, clusters that enforce the highest level of Pod Security Standards (PSS) impose strict security restrictions on deployed workloads. When deploying ITRS Analytics in such environments, you must manually install and manage prerequisites such as the cert-manager before proceeding with the ITRS Analytics installation.