'gh gei migrate-repo' gives "Git archive URL returned an invalid SSL certificate"

[dccarson]

Select Topic Area

General

Body

I'm trying to use 'gh gei' to migrate a single repo from GHES to cloud. GHES is running v. 3.10. I have configured the Management Console for an AWS bucket. I have created new PATs for both ES and Cloud and made sure my cloud token has SSO enabled, required by our org.

My command invocation, after setting the variables:

gh gei migrate-repo --github-source-org Engineering --source-repo xbt_core \
  --github-target-org ${ORG} --target-repo xbt_core \
  --ghes-api-url https://github.exs.com/api/v3 \
  --aws-bucket-name dcc.ghes.to.ghcloud.migration \
  --aws-region us-east-2 \
  --aws-access-key ${AWS_KEY} \
  --aws-secret-key ${AWS_SECRET} \
  --no-ssl-verify \
  --github-source-pat ${GH_SRC_PAT} \
  --github-target-pat ${GH_TGT_PAT}

When I run the command, the export to AWS seems to work just fine. This is also clear from the fact that there are two new tarballs whenever I run the migration.

However, it always fails as follows:

[2024-07-01 16:19:30] [INFO] Migration in progress (ID: RM_kg***TIzMzI). State: PENDING_VALIDATION. Waiting 10 seconds...
[2024-07-01 16:19:40] [ERROR] Migration Failed. Migration ID: RM_kg***TIzMzI
[2024-07-01 16:19:40] [INFO] Migration log available at  or by running `gh gei download-logs --github-target-org extremenetworks --target-repo xbt_core`
[2024-07-01 16:19:40] [ERROR] Git archive URL returned an invalid SSL certificate. Please make sure that the certificate is valid and issued by a trusted certificate authority (CA)

How can I be getting an invalid certificate from github.com? Also, I am using --no-ssl-verify so I don't have to worry about the cert on the GHES side, which is fine as this is all behind a firewall.

Also note that when I try to download the log, as suggested by the error above, I get the following. (Note in the output suggesting I retrieve the log that there seems to be a word missing. It says: "Migration log available at or by running" -- clearly, there should be a location after "available at" in that sentence.)

(0)[dcarson@cape-fear gh_migrate] gh gei download-logs --github-target-org ex**s --target-repo xbt_core                                                                                                                                                        [2024-07-01 10:49:01] [INFO] You are running an up-to-date version of the gei CLI [v1.8.0]
[2024-07-01 10:49:01] [INFO] GITHUB REPO: xbt_core
[2024-07-01 10:49:01] [INFO] GITHUB ORG: ex***s
[2024-07-01 10:49:01] [WARNING] Migration logs are only available for 24 hours after a migration finishes!
[2024-07-01 10:49:01] [INFO] Downloading migration logs...
[2024-07-01 10:50:03] [ERROR] Migration log for repository xbt_core unavailable!