Are there any directions for fixing a host that has expired rancher-users #rke2

Title

sparse-continent-53433

05/09/2022, 2:00 PM

Are there any directions for fixing a host that has expired certificates? I'm receiving this error on a few of my nodes:

level=error msg="CA cert validation failed: Get \"<https://127.0.0.1:6444/cacerts>\": x509: certificate has expired or is not yet valid

I did try restarting the rke2-agent service and running rke2-killall.sh and it still isn't happy. Any ideas as to what to try next?

creamy-pencil-82913

05/09/2022, 10:12 PM

What version are you running? Did you restart rke2-server on the servers?

sparse-continent-53433

05/10/2022, 11:45 AM

Version: v1.20.4+rke2r1 I am going to restart the service on the control plane node that is marked "NotReady" the other two control plane nodes are currently "Ready"

I also rebooted an additional control plane node that was in the "Ready" state and I now get the same certificate error.

I restated these services by running

systemctl restart rke2-server

I did not run

rke2-killall.sh

Now all control planes are marked "NotReady"

Any additional ideas?

View count: 18

Back to #rke2 Join thread in Slack