Skip to main content

Kubernetes internal certificates have expired


  • Errors within cluster relating to expired Kubernetes internal certificates, i.e.
    E0830 12:45:48.789064 34964 proxy_server.go:147] Error while proxying request: x509: certificate has expired or is not yet valid: current time 2023-08-30T12:45:48+03:00 is after 2023-08-15T14:55:09Z


  • Element On-Premise Installer


Run the following commands to refresh your internal certificates:

  1. Run sudo microk8s.refresh-certs -ce server.crt to check for expired certs.
  2. Run sudo microk8s.refresh-certs -e front-proxy-client.crt to
  3. renew
  4. thesudo expiredsnap certs.restart microk8s

Root Cause

Most likely caused by an open issue with microk8s regarding auto-renewing of certificates, see Issue 2489.