title: [AWS][EKS][Fargate] x509: certificate signed by unknown authority
body: <p>I'm building an AWS EKS cluster with Fargate managed nodes and everything is fine till I want to pull a docker image from a remote on-premise docker registry hosted on Harbor. CA is fully private on on-premise and I thought that this could be an issue.</p>
  <p>As a workaround, I tried to create an Apache proxy with SSL key and cert generated by AWS PCA <strong>(from another account!)</strong>. Later customized docker pull endpoint call to move (pull) through this proxy.<br />
  I tested this setup from the proxy instance as well as another bastion host instance and images are pulling correctly with Harbor authentication (not from EKS).</p>
  <p>I checked and CA created in AWS PCA is not expired (2022 date expiration).</p>
  <p>From inside AWS EKS, this pull doesn't work correctly. I'm including error messages:</p>
  <p><div class="snippet" data-lang="js" data-hide="false" data-console="true" data-babel="false">
  <div class="snippet-code">
  <pre class="snippet-code-html lang-html prettyprint-override"><code>    Events:
    Type     Reason           Age   From               Message
    ----     ------           ----  ----               -------
    Warning  LoggingDisabled  78s   fargate-scheduler  Disabled logging because aws-logging configmap was not found. configmap "aws-logging" not found
    Normal   Scheduled        5s    fargate-scheduler  Successfully assigned &lt;name-of-deployment-here&gt; to fargate-ip-10-155-250-49.eu-central-1.compute.internal
    Normal   Pulling          2s    kubelet            Pulling image "&lt;image_name_here&gt;"
    Warning  Failed           2s    kubelet            Failed to pull image "&lt;apache-proxy-address&gt;/&lt;docker-repository-address&gt;": rpc error: code = Unknown desc = failed to pull and unpack image "&lt;apache-proxy-address&gt;/&lt;docker-repository-address&gt;": failed to resolve reference "&lt;apache-proxy-address&gt;/&lt;docker-repository-address&gt;: failed to do request: Head https://&lt;apache-proxy-address&gt;/&lt;****&gt;/&lt;docker-repository-address&gt;: x509: certificate signed by unknown authority
    Warning  Failed           2s    kubelet            Error: ErrImagePull
    Normal   BackOff          1s    kubelet            Back-off pulling image "&lt;apache-proxy-address&gt;/&lt;docker-repository-address&gt;"
    Warning  Failed           1s    kubelet            Error: ImagePullBackOff</code></pre>
  </div>
  </div>
  </p>
  <p>Error is caused by:</p>
  <pre><code>x509: certificate signed by unknown authority
  </code></pre>
  <p>Do you guys have any ideas?</p>
  <p>Thanks in advance!</p>