This message was deleted Rancher Users #k3s

This message was deleted.

adamant-kite-43734

01/21/2024, 12:43 PM

This message was deleted.

creamy-pencil-82913

01/21/2024, 5:11 PM

Just restart k3s. Certs are automatically renewed on startup if they are within 90 days of expiring

👍 1

proud-helmet-56207

01/22/2024, 8:23 AM

I did that, alertmanager noticed that as RESOLVED, and then 3 minutes later issued the same alert again

proud-helmet-56207

01/22/2024, 8:23 AM

weird

proud-helmet-56207

01/22/2024, 8:23 AM

I read about cert caching, maybe this is an issue

proud-helmet-56207

01/22/2024, 8:52 AM

well, prometheus was lying about the instance name so I checked all nodes with:

Copy code

for i in `ls /var/lib/rancher/k3s/agent/*.crt`; do echo $i; openssl x509 -enddate -noout -in $i; done

proud-helmet-56207

01/22/2024, 8:52 AM

and found another instance with expiring keys - systemctl restart k3s-agent fixed the warning, Thanks @creamy-pencil-82913 for help

10 Views