https://rancher.com/ logo
Join Slack
Powered by
This message was deleted.
# k3s
a
This message was deleted.
c
… what did you do to resolve them? The message suggests you’ve got invalid characters in your --tls-san flag, or in one of the SAN annotations on the secret.
p
We're not running dynamiclistener manually, so I don't have the correct answer. Can you please tell me which secret are you mentioning here?
c
dynamiclistener is used by k3s for the apiserver listener. It is the library that handles dynamically generating certificates that include all the node names and addresses, in addition to the --tls-san value configured on the server nodes.
can you describe what specifically you did, and attach the full k3s server log from journald, instead of just sharing a single error message?
p
We're running k3s inside a pod, so no journald logs. But here are some logs
Untitled
@creamy-pencil-82913 I figured dynamic-cert.json is empty. Could that be a problem?
c
yeah, that could do it… try deleting it?
the error indicates that there’s a zero byte in a string somewhere though, is it actually empty?
p
I just figured, it is not empty, but starts with null characters So the volume problem that I mentioned might have corrupted that I see the same problem with other cert files. Is it okay to delete them as well?
Deleting dynamic-certs.json helped. The apiserver seems to be coming up
c
yeahhh sounds like you got some filesystem corruption?
p
sounds like
Thanks for the help @creamy-pencil-82913 !
5 Views
Open in Slack
PreviousNext
Powered by