Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Rancher local cluster: x509: certificate has expired or is not yet valid #45685

Open
kostovaljubica7 opened this issue Jun 5, 2024 · 0 comments
Labels
kind/bug Issues that are defects reported by users or that we know have reached a real release

Comments

@kostovaljubica7
Copy link

kostovaljubica7 commented Jun 5, 2024

Rancher cluster is RKE deployed.
rke version v1.2.6
Rancher version v2.5.7
Kubernetes version: v1.20.4-rancher1

When I try to register new pod in local cluster or do redeploy I get this error:

Pods "rancher-aahhdhfifr-" is forbidden: Get "https://[::1]:6443/api/v1/namespaces/cattle-system/limitranges": x509: certificate has expired or is not yet valid: current time 2024-06-05T12:19:35Z is after 2023-04-10T19:38:43Z

same for redeploy

Failed to create new replica set "cert-manager-7rhdfjhdjfh": Get "https://[::1]:6443/api/v1/namespaces/cert-manager/resourcequotas": x509: certificate has expired or is not yet valid: current time 2024-06-05T13:36:51Z is after 2023-04-10T19:38:43Z

kubectl -n cattle-system get secrets return secret serving-cert that was expired on same date

kubectl get secret serving-cert -n cattle-system -o jsonpath='{.data.tls\.crt}' | base64 --decode | openssl x509 -noout -enddate
notAfter=Apr 10 20:39:49 2023 GMT

Basically all the operations related with local cluster are blocked due of this error. I can't register new resources. And this cert had been expired 14mounts ago.
All the correlated issues lead me to delete this secret via kubectl, but my question is how will be recreated?
Will Rancher automatically recreate this secret if deleted?

@kostovaljubica7 kostovaljubica7 added the kind/bug Issues that are defects reported by users or that we know have reached a real release label Jun 5, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
kind/bug Issues that are defects reported by users or that we know have reached a real release
Projects
None yet
Development

No branches or pull requests

1 participant