Kubernetes internal certificates have expired
Issue
- Errors within cluster relating to expired Kubernetes internal certificates, i.e.
E0830 12:45:48.789064 34964 proxy_server.go:147] Error while proxying request: x509: certificate has expired or is not yet valid: current time 2023-08-30T12:45:48+03:00 is after 2023-08-15T14:55:09Z
Environment
- Element On-Premise Installer
Resolution
Run the following commands to refresh your internal certificates:
-
sudo microk8s.refresh-certs -e server.crt
-
sudo microk8s.refresh-certs -e front-proxy-client.crt
-
sudo snap restart microk8s
Root Cause
Most likely caused by an open issue with microk8s regarding auto-renewing of certificates, see Issue 2489.