{"action":"created","issue":{"url":"https://api.github.com/repos/kubernetes/kubernetes/issues/10190","labels_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/10190/labels{/name}","comments_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/10190/comments","events_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/10190/events","html_url":"https://github.com/kubernetes/kubernetes/issues/10190","id":90181595,"number":10190,"title":"Get https://gcr.io/v1/_ping: tls: failed to parse certificate from server: x509: RSA modulus is not a positive number","user":{"login":"setantam","id":12998522,"avatar_url":"https://avatars.githubusercontent.com/u/12998522?v=3","gravatar_id":"","url":"https://api.github.com/users/setantam","html_url":"https://github.com/setantam","followers_url":"https://api.github.com/users/setantam/followers","following_url":"https://api.github.com/users/setantam/following{/other_user}","gists_url":"https://api.github.com/users/setantam/gists{/gist_id}","starred_url":"https://api.github.com/users/setantam/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/setantam/subscriptions","organizations_url":"https://api.github.com/users/setantam/orgs","repos_url":"https://api.github.com/users/setantam/repos","events_url":"https://api.github.com/users/setantam/events{/privacy}","received_events_url":"https://api.github.com/users/setantam/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/kubernetes/kubernetes/labels/kind/support","name":"kind/support","color":"eb6420"},{"url":"https://api.github.com/repos/kubernetes/kubernetes/labels/team/node","name":"team/node","color":"d2b48c"}],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":10,"created_at":"2015-06-22T18:56:44Z","updated_at":"2015-09-01T06:38:00Z","closed_at":"2015-08-25T23:10:47Z","body":"Hi,\r\n\r\nI'm on rhel 6.6, go 1.4.2 and a recent pull of k8s release-0.19.0 (21st June 2015). I'm also behind a firewall but should have all the proxies set up properly.\r\n\r\nI'm new to kubernetes. I'm trying to go through the \"local\" getting started guide. I can kick things off by running hack/local-up-cluster.sh, but I can't get a pod running. In the /tmp/kubelet.log there's a `Get https://gcr.io/v1/_ping: tls: failed to parse certificate from server: x509: RSA modulus is not a positive number`. More log is below.\r\n\r\nI can do a \"curl -k https://gcr.io/v1/_ping\", so I know the proxy is okay. And from going through the Go 509 lib bpackage, it looks like the error is because the code is finding the cert to be invalid. It's unlikely that the google cert would be invalid, right?\r\n\r\nAny help on this would be appreciated.\r\n\r\nIn terms of workarounds, is there any way to\r\n1. Download  the google container image by hand outside of k8s or\r\n2. Disable go's checking of the cert (I couldn't find a way to do this).\r\n\r\nThanks,\r\n\r\nSetanta\r\n\r\n`I0622 14:43:30.326881    2641 docker.go:154] Pulling image gcr.io/google_containers/pause:0.8.0 without credentials\r\nE0622 14:43:32.365017    2641 manager.go:1521] Failed to create pod infra container: image pull failed for gcr.io/google_containers/pause:0.8.0, this may be because there are no credentials on this request.  details: (API error (500): invalid registry endpoint \"http://gcr.io/v0/\". HTTPS attempt: unable to ping registry endpoint https://gcr.io/v0/\r\nv2 ping attempt failed with error: Get https://gcr.io/v2/: tls: failed to parse certificate from server: x509: RSA modulus is not a positive number\r\n v1 ping attempt failed with error: Get https://gcr.io/v1/_ping: tls: failed to parse certificate from server: x509: RSA modulus is not a positive number. HTTP attempt: unable to ping registry endpoint http://gcr.io/v0/\r\nv2 ping attempt failed with error: Get https://gcr.io/v2/: tls: failed to parse certificate from server: x509: RSA modulus is not a positive number\r\n v1 ping attempt failed with error: Get https://gcr.io/v1/_ping: tls: failed to parse certificate from server: x509: RSA modulus is not a positive number\r\n); Skipping pod \"poc-producer-zdcy5_default\"\r\nI0622 14:43:32.365416    2641 kubelet.go:2137] Generating status for \"poc-producer-zdcy5_default\"\r\nI0622 14:43:32.365165    2641 server.go:592] Event(api.ObjectReference{Kind:\"Pod\", Namespace:\"default\", Name:\"poc-producer-zdcy5\", UID:\"f2622feb-18fd-11e5-b928-005056bb61c9\", APIVersion:\"v1\", ResourceVersion:\"63\", FieldPath:\"implicitly required container POD\"}): reason: 'failed' Failed to pull image \"gcr.io/google_containers/pause:0.8.0\": image pull failed for gcr.io/google_containers/pause:0.8.0, this may be because there are no credentials on this request.  details: (API error (500): invalid registry endpoint \"http://gcr.io/v0/\". HTTPS attempt: unable to ping registry endpoint https://gcr.io/v0/\r\nv2 ping attempt failed with error: Get https://gcr.io/v2/: tls: failed to parse certificate from server: x509: RSA modulus is not a positive number\r\n v1 ping attempt failed with error: Get https://gcr.io/v1/_ping: tls: failed to parse certificate from server: x509: RSA modulus is not a positive number. HTTP attempt: unable to ping registry endpoint http://gcr.io/v0/\r\nv2 ping attempt failed with error: Get https://gcr.io/v2/: tls: failed to parse certificate from server: x509: RSA modulus is not a positive number\r\n v1 ping attempt failed with error: Get https://gcr.io/v1/_ping: tls: failed to parse certificate from server: x509: RSA modulus is not a positive number\r\n)\r\nI0622 14:43:32.371065    2641 status_manager.go:103] Ignoring same pod status for poc-producer-zdcy5_default - old: {Pending [{Ready False}]  127.0.0.1  2015-06-22 12:44:27.738901719 -0400 EDT [{poc-producer {%!s(*api.ContainerStateWaiting=&{Image: poc/producer is ready, container is creating}) %!s(*api.ContainerStateRunning=<nil>) %!s(*api.ContainerStateTerminated=<nil>)} {%!s(*api.ContainerStateWaiting=<nil>) %!s(*api.ContainerStateRunning=<nil>) %!s(*api.ContainerStateTerminated=<nil>)} %!s(bool=false) %!s(int=0) poc/producer  }]} new: {Pending [{Ready False}]  127.0.0.1  2015-06-22 12:44:27.738901719 -0400 EDT [{poc-producer {%!s(*api.ContainerStateWaiting=&{Image: poc/producer is ready, container is creating}) %!s(*api.ContainerStateRunning=<nil>) %!s(*api.ContainerStateTerminated=<nil>)} {%!s(*api.ContainerStateWaiting=<nil>) %!s(*api.ContainerStateRunning=<nil>) %!s(*api.ContainerStateTerminated=<nil>)} %!s(bool=false) %!s(int=0) poc/producer  }]}\r\nE0622 14:43:32.371119    2641 pod_workers.go:111] Error syncing pod f2622feb-18fd-11e5-b928-005056bb61c9, skipping: image pull failed for gcr.io/google_containers/pause:0.8.0, this may be because there are no credentials on this request.  details: (API error (500): invalid registry endpoint \"http://gcr.io/v0/\". HTTPS attempt: unable to ping registry endpoint https://gcr.io/v0/\r\nv2 ping attempt failed with error: Get https://gcr.io/v2/: tls: failed to parse certificate from server: x509: RSA modulus is not a positive number\r\n v1 ping attempt failed with error: Get https://gcr.io/v1/_ping: tls: failed to parse certificate from server: x509: RSA modulus is not a positive number. HTTP attempt: unable to ping registry endpoint http://gcr.io/v0/\r\nv2 ping attempt failed with error: Get https://gcr.io/v2/: tls: failed to parse certificate from server: x509: RSA modulus is not a positive number\r\n v1 ping attempt failed with error: Get https://gcr.io/v1/_ping: tls: failed to parse certificate from server: x509: RSA modulus is not a positive number\r\n)\r\nI0622 14:43:32.371163    2641 server.go:592] Event(api.ObjectReference{Kind:\"Pod\", Namespace:\"default\", Name:\"poc-producer-zdcy5\", UID:\"f2622feb-18fd-11e5-b928-005056bb61c9\", APIVersion:\"v1\", ResourceVersion:\"63\", FieldPath:\"\"}): reason: 'failedSync' Error syncing pod, skipping: image pull failed for gcr.io/google_containers/pause:0.8.0, this may be because there are no credentials on this request.  details: (API error (500): invalid registry endpoint \"http://gcr.io/v0/\". HTTPS attempt: unable to ping registry endpoint https://gcr.io/v0/\r\nv2 ping attempt failed with error: Get https://gcr.io/v2/: tls: failed to parse certificate from server: x509: RSA modulus is not a positive number\r\n v1 ping attempt failed with error: Get https://gcr.io/v1/_ping: tls: failed to parse certificate from server: x509: RSA modulus is not a positive number. HTTP attempt: unable to ping registry endpoint http://gcr.io/v0/\r\nv2 ping attempt failed with error: Get https://gcr.io/v2/: tls: failed to parse certificate from server: x509: RSA modulus is not a positive number\r\n v1 ping attempt failed with error: Get https://gcr.io/v1/_ping: tls: failed to parse certificate from server: x509: RSA modulus is not a positive number\r\n)`"},"comment":{"url":"https://api.github.com/repos/kubernetes/kubernetes/issues/comments/136600547","html_url":"https://github.com/kubernetes/kubernetes/issues/10190#issuecomment-136600547","issue_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/10190","id":136600547,"user":{"login":"tech2free","id":12993308,"avatar_url":"https://avatars.githubusercontent.com/u/12993308?v=3","gravatar_id":"","url":"https://api.github.com/users/tech2free","html_url":"https://github.com/tech2free","followers_url":"https://api.github.com/users/tech2free/followers","following_url":"https://api.github.com/users/tech2free/following{/other_user}","gists_url":"https://api.github.com/users/tech2free/gists{/gist_id}","starred_url":"https://api.github.com/users/tech2free/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tech2free/subscriptions","organizations_url":"https://api.github.com/users/tech2free/orgs","repos_url":"https://api.github.com/users/tech2free/repos","events_url":"https://api.github.com/users/tech2free/events{/privacy}","received_events_url":"https://api.github.com/users/tech2free/received_events","type":"User","site_admin":false},"created_at":"2015-09-01T06:38:00Z","updated_at":"2015-09-01T06:38:00Z","body":"The same error, did you get any solution?"}}