Hi, I'm running Rancher 2.5.15, upgraded from 2.5.9 a few weeks ago (installer around june of past year), yesterday my Rancher container rebooted automatically, and I noticed when the Rancher Web UI became innacesible, after starting the container agains, everything seems to work fine, but I see that my local cluster is at a

Configuring

stage and if I take a look into the docker container logs I see a lot of this lines

[ERROR] failed to call leader func: failed to add management data: problem reconciling role templates: couldn't update project-member: Internal error occurred: failed calling webhook "<http://rancherauth.cattle.io|rancherauth.cattle.io>": Post "<https://rancher-we>

bhook.cattle-system.svc:443/v1/webhook/validation?timeout=10s": x509: certificate has expired or is not yet valid: current time 2022-07-06T19:29:10Z is after 2022-07-05T20:45:47Z

I tried what was recomended at this page https://rancher.com/docs/rancher/v2.6/en/troubleshooting/expired-webhook-certificates/ but I got kubectl delete secret -n cattle-system cattle-webhook-tls

Error from server (NotFound): secrets "cattle-webhook-tls" not found

kubectl delete mutatingwebhookconfigurations.admissionregistration.k8s.io --ignore-not-found=true rancher.cattle.io This one went fine

kubectl delete pod -n cattle-system -l app=rancher-webhook

No resources found After that, I restarted the container and the error still shows up

There is a note at the bottom of that page that indicates that the secret name is just an example:

Note: The webhook certificate expiration issue is not specific to

cattle-webhook-tls

as listed in the examples. You will fill in your expired certificate secret accordingly.

What secrets do you have in the cattle-system namespace?

Sorry, I'm not the sharpest tool in the shed, I was running those commands with the kubeconf from the provisioned cluster, not the local one, now it works, thanks

ahh that’d do it too!