V2EX = way to explore
V2EX 是一个关于分享和探索的地方
现在注册
已注册用户请  登录
V2EX 提问指南
msmmbl
V2EX  ›  问与答

K3S 日志提示证书过期,怎么找到是哪个证书

  •  
  •   msmmbl · 2021-09-19 10:55:30 +08:00 · 947 次点击
    这是一个创建于 921 天前的主题,其中的信息可能已经有所发展或是发生改变。

    journalctl -f -u k3s一直在不停的输出

    Sep 19 10:50:50 xxx.com k3s[20682]: E0919 10:50:50.932898   20682 authentication.go:53] Unable to authenticate the request due to an error: x509: certificate has expired or is not yet valid
    Sep 19 10:50:50 xxx.com k3s[20682]: E0919 10:50:50.936055   20682 authentication.go:53] Unable to authenticate the request due to an error: x509: certificate has expired or is not yet valid
    Sep 19 10:50:50 xxx.com k3s[20682]: E0919 10:50:50.941111   20682 authentication.go:53] Unable to authenticate the request due to an error: x509: certificate has expired or is not yet valid
    

    但是查看证书,都没有过期 for i in ls /var/lib/rancher/k3s/server/tls/*.crt; do echo $i; openssl x509 -enddate -noout -in $i; done

    /var/lib/rancher/k3s/server/tls/client-admin.crt
    notAfter=Sep 18 09:40:31 2022 GMT
    /var/lib/rancher/k3s/server/tls/client-auth-proxy.crt
    notAfter=Sep 18 09:40:31 2022 GMT
    /var/lib/rancher/k3s/server/tls/client-ca.crt
    notAfter=Sep 15 05:25:39 2030 GMT
    /var/lib/rancher/k3s/server/tls/client-cloud-controller.crt
    notAfter=Sep 18 09:40:31 2022 GMT
    /var/lib/rancher/k3s/server/tls/client-controller.crt
    notAfter=Sep 18 09:40:31 2022 GMT
    /var/lib/rancher/k3s/server/tls/client-k3s-controller.crt
    notAfter=Sep 18 09:40:31 2022 GMT
    /var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt
    notAfter=Sep 18 09:40:31 2022 GMT
    /var/lib/rancher/k3s/server/tls/client-kube-proxy.crt
    notAfter=Sep 18 09:40:31 2022 GMT
    /var/lib/rancher/k3s/server/tls/client-scheduler.crt
    notAfter=Sep 18 09:40:31 2022 GMT
    /var/lib/rancher/k3s/server/tls/request-header-ca.crt
    notAfter=Sep 15 05:25:39 2030 GMT
    /var/lib/rancher/k3s/server/tls/server-ca.crt
    notAfter=Sep 15 05:25:39 2030 GMT
    /var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt
    notAfter=Sep 18 09:40:31 2022 GMT
    

    应该怎么排查

    1 条回复
    msmmbl
        1
    msmmbl  
    OP
       2021-09-20 02:35:54 +08:00
    升级到最新版,错误消失
    关于   ·   帮助文档   ·   博客   ·   API   ·   FAQ   ·   我们的愿景   ·   实用小工具   ·   5439 人在线   最高记录 6543   ·     Select Language
    创意工作者们的社区
    World is powered by solitude
    VERSION: 3.9.8.5 · 35ms · UTC 08:49 · PVG 16:49 · LAX 01:49 · JFK 04:49
    Developed with CodeLauncher
    ♥ Do have faith in what you're doing.