https://rancher.com/ logo
#rke2
Title
s

sparse-continent-53433

05/09/2022, 2:00 PM
Are there any directions for fixing a host that has expired certificates? I'm receiving this error on a few of my nodes:
Copy code
level=error msg="CA cert validation failed: Get \"<https://127.0.0.1:6444/cacerts>\": x509: certificate has expired or is not yet valid
I did try restarting the rke2-agent service and running rke2-killall.sh and it still isn't happy. Any ideas as to what to try next?
c

creamy-pencil-82913

05/09/2022, 10:12 PM
What version are you running? Did you restart rke2-server on the servers?
s

sparse-continent-53433

05/10/2022, 11:45 AM
Version: v1.20.4+rke2r1 I am going to restart the service on the control plane node that is marked "NotReady" the other two control plane nodes are currently "Ready"
I also rebooted an additional control plane node that was in the "Ready" state and I now get the same certificate error.
I restated these services by running
systemctl restart rke2-server
I did not run
rke2-killall.sh
Now all control planes are marked "NotReady"
Any additional ideas?
46 Views