Skip to main content

Kubernetes internal certificates have expired

Issue

  • Errors within cluster relating to expired Kubernetes internal certificates, i.e.
    E0830 12:45:48.789064 34964 proxy_server.go:147] Error while proxying request: x509: certificate has expired or is not yet valid: current time 2023-08-30T12:45:48+03:00 is after 2023-08-15T14:55:09Z
    

Environment

  • Element On-Premise Installer

Resolution

Run the following commands to refresh your internal certificates:

  1. sudo microk8s.refresh-certs -e server.crt
  2. sudo microk8s.refresh-certs -e front-proxy-client.crt
  3. sudo snap restart microk8s

Root Cause

Most likely caused by an open issue with microk8s regarding auto-renewing of certificates, see Issue 2489.