Error running installation script (the certificate has expired for etcd-server)

Hi,
We were running the script and got this error. Any idea of how to fix this? Thanks!

Would you be able capture the output ? The Screenshot image is not getting loaded.

This page talks about Certificate renewal - https://kurl.sh/docs/install-with-kurl/setup-tls-certs#manual-renewal

jalaja

Thanks. It is
error execution phase certs/etcd-server: failed to write or validate certificate “etcd-server”? failure loading etcd/server certificate: failed to load certificate: the certificate has expired

Wondering if we rerun a latest kURL script, would that resolve this issue? This is a on-prem deployment therefore we cannot verify it at our side first.

1 Like

Would you be able to provide any extra info about the error message? Sometimes the surrounding lines can help a lot, as can what version of k8s was running.

Generally though, following the steps in the manual cert renewal document (kubeadm alpha certs renew all, mv /etc/kubernetes/manifests/kube-apiserver.yaml /tmp/ && sleep 1 && mv /tmp/kube-apiserver.yaml /etc/kubernetes/manifests/, mv /etc/kubernetes/manifests/kube-controller-manager.yaml /tmp/ && sleep 1 && mv /tmp/kube-controller-manager.yaml /etc/kubernetes/manifests/, mv /etc/kubernetes/manifests/kube-scheduler.yaml /tmp/ && sleep 1 && mv /tmp/kube-scheduler.yaml /etc/kubernetes/manifests/) will do the trick for expired certificates.

It works now! Thanks so much!

1 Like