V2EX = way to explore
V2EX 是一个关于分享和探索的地方
现在注册
已注册用户请  登录
V2EX 提问指南
msmmbl
V2EX  ›  问与答

K3S 日志提示证书过期,怎么找到是哪个证书

  •  
  •   msmmbl · 122 天前 · 410 次点击
    这是一个创建于 122 天前的主题,其中的信息可能已经有所发展或是发生改变。

    journalctl -f -u k3s一直在不停的输出

    Sep 19 10:50:50 xxx.com k3s[20682]: E0919 10:50:50.932898   20682 authentication.go:53] Unable to authenticate the request due to an error: x509: certificate has expired or is not yet valid
    Sep 19 10:50:50 xxx.com k3s[20682]: E0919 10:50:50.936055   20682 authentication.go:53] Unable to authenticate the request due to an error: x509: certificate has expired or is not yet valid
    Sep 19 10:50:50 xxx.com k3s[20682]: E0919 10:50:50.941111   20682 authentication.go:53] Unable to authenticate the request due to an error: x509: certificate has expired or is not yet valid
    

    但是查看证书,都没有过期 for i in ls /var/lib/rancher/k3s/server/tls/*.crt; do echo $i; openssl x509 -enddate -noout -in $i; done

    /var/lib/rancher/k3s/server/tls/client-admin.crt
    notAfter=Sep 18 09:40:31 2022 GMT
    /var/lib/rancher/k3s/server/tls/client-auth-proxy.crt
    notAfter=Sep 18 09:40:31 2022 GMT
    /var/lib/rancher/k3s/server/tls/client-ca.crt
    notAfter=Sep 15 05:25:39 2030 GMT
    /var/lib/rancher/k3s/server/tls/client-cloud-controller.crt
    notAfter=Sep 18 09:40:31 2022 GMT
    /var/lib/rancher/k3s/server/tls/client-controller.crt
    notAfter=Sep 18 09:40:31 2022 GMT
    /var/lib/rancher/k3s/server/tls/client-k3s-controller.crt
    notAfter=Sep 18 09:40:31 2022 GMT
    /var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt
    notAfter=Sep 18 09:40:31 2022 GMT
    /var/lib/rancher/k3s/server/tls/client-kube-proxy.crt
    notAfter=Sep 18 09:40:31 2022 GMT
    /var/lib/rancher/k3s/server/tls/client-scheduler.crt
    notAfter=Sep 18 09:40:31 2022 GMT
    /var/lib/rancher/k3s/server/tls/request-header-ca.crt
    notAfter=Sep 15 05:25:39 2030 GMT
    /var/lib/rancher/k3s/server/tls/server-ca.crt
    notAfter=Sep 15 05:25:39 2030 GMT
    /var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt
    notAfter=Sep 18 09:40:31 2022 GMT
    

    应该怎么排查

    1 条回复
    msmmbl
        1
    msmmbl  
    OP
       122 天前
    升级到最新版,错误消失
    关于   ·   帮助文档   ·   API   ·   FAQ   ·   我们的愿景   ·   广告投放   ·   感谢   ·   实用小工具   ·   1365 人在线   最高记录 5497   ·     Select Language
    创意工作者们的社区
    World is powered by solitude
    VERSION: 3.9.8.5 · 22ms · UTC 23:45 · PVG 07:45 · LAX 15:45 · JFK 18:45
    ♥ Do have faith in what you're doing.