I am quite new to Racher,
For last 2 days, i am trying to create a new cluster by using rancher,
however, i am keep getting in in Cluster logs
use of "crypto/rsa: verification error" while trying to verify candidate authority certificate "kube-ca")", ServerName “”)
2021-06-29 20:27:07.192253 I | embed: rejected connection from “192.168.0.27:51668” (error “tls: failed to verify client’s certificate: x509: certificate signed by unknown authority (possibly because of "crypto/rsa: verification error" while trying to verify candidate authority certificate "kube-ca")”, ServerName “”)
2021-06-29 20:27:07.584585 I | mvcc: store.index: compact 17393
2021-06-29 20:27:07.615693 I | mvcc: finished scheduled compaction at 17393 (took 27.371259ms)
2021-06-29 20:27:09.639638 W | etcdserver: read-only range request "key:"/registry/leases/kube-system/kube-controller-manager" " with result “range_response_count:1 size:517” took too long (211.426127ms) to execute
2021-06-29 20:27:09.639686 W | etcdserver: read-only range request "key:"/registry/cronjobs/" range_end:"/registry/cronjobs0" limit:500 " with result “range_response_count:0 size:6” took too long (211.928106ms) to execute
2021-06-29 20:27:09.640193 W | etcdserver: request “header:<ID:4125713254345292977 username:"system:node" auth_revision:1 > txn:<compare:<target:MOD key:"/registry/minions/k8scontrol1" mod_revision:17387 > success:<request_put:<key:"/registry/minions/k8scontrol1" value_size:3745 >> failure:<request_range:<key:"/registry/minions/k8scontrol1" > >>” with result “size:18” took too long (144.205915ms) to execute
i am using my own lab server so i don’t have paid certificate,
so how do i fix this issues ?
or do i need to have a paid certificate setup to work with rancher ?
so while digging, I see now I get this error when I do
docker logs etcd
and in rancher dashboard, i get this
This cluster is currently Provisioning ; areas that interact directly with it will not be available until the API is ready.
[etcd] Failed to bring up Etcd Plane: etcd cluster is unhealthy: hosts [192.168.0.27] failed to report healthy. Check etcd container logs on each host for more information
How Can I resolve these certificate issues?
2021-06-29 20:25:50.088593 I | embed: rejected connection from “192.168.0.27:33221” (error “EOF”, ServerName “”)
2021-06-29 20:26:11.922698 I | embed: rejected connection from “192.168.0.27:51642” (error “tls: failed to verify client’s certificate: x509: certificate signed by unknown authority (possibly because of "crypto/rsa: verification error" while trying to verify candidate authority certificate "kube-ca")”, ServerName “”)
2021-06-29 20:26:16.937596 I | embed: rejected connection from “192.168.0.27:51644” (error “tls: failed to verify client’s certificate: x509: certificate signed by unknown authority (possibly because of "crypto/rsa: verification error" while trying to verify candidate authority certificate "kube-ca")”, ServerName “”)
2021-06-29 20:26:21.965792 I | embed: rejected connection from “192.168.0.27:51646” (error “tls: failed to verify client’s certificate: x509: certificate signed by unknown authority (possibly because of "crypto/rsa: verification error" while trying to verify candidate authority certificate "kube-ca")”, ServerName “”)
2021-06-29 20:26:26.991832 I | embed: rejected connection from “192.168.0.27:51648” (error “tls: failed to verify client’s certificate: x509: certificate signed by unknown authority (possibly because of "crypto/rsa: verification error" while trying to verify candidate authority certificate "kube-ca")”, ServerName “”)
2021-06-29 20:26:32.015767 I | embed: rejected connection from “192.168.0.27:51652” (error “tls: failed to verify client’s certificate: x509: certificate signed by unknown authority (possibly because of "crypto/rsa: verification error" while trying to verify candidate authority certificate "kube-ca")”, ServerName “”)
2021-06-29 20:26:37.042779 I | embed: rejected connection from “192.168.0.27:51654” (error “tls: failed to verify client’s certificate: x509: certificate signed by unknown authority (possibly because of "crypto/rsa: verification error" while trying to verify candidate authority certificate "kube-ca")”, ServerName “”)
2021-06-29 20:26:42.068187 I | embed: rejected connection from “192.168.0.27:51656” (error “tls: failed to verify client’s certificate: x509: certificate signed by unknown authority (possibly because of "crypto/rsa: verification error" while trying to verify candidate authority certificate "kube-ca")”, ServerName “”)
2021-06-29 20:26:47.093535 I | embed: rejected connection from “192.168.0.27:51658” (error “tls: failed to verify client’s certificate: x509: certificate signed by unknown authority (possibly because of "crypto/rsa: verification error" while trying to verify candidate authority certificate "kube-ca")”, ServerName “”)
2021-06-29 20:26:52.118599 I | embed: rejected connection from “192.168.0.27:51660” (error “tls: failed to verify client’s certificate: x509: certificate signed by unknown authority (possibly because of "crypto/rsa: verification error" while trying to verify candidate authority certificate "kube-ca")”, ServerName “”)
2021-06-29 20:26:57.144303 I | embed: rejected connection from “192.168.0.27:51662” (error “tls: failed to verify client’s certificate: x509: certificate signed by unknown authority (possibly because of "crypto/rsa: verification error" while trying to verify candidate authority certificate "kube-ca")”, ServerName “”)
2021-06-29 20:27:02.168382 I | embed: rejected connection from “192.168.0.27:51664” (error “tls: failed to verify client’s certificate: x509: certificate signed by unknown authority (possibly because of "crypto/rsa: verification error" while trying to verify candidate authority certificate "kube-ca")”, ServerName “”)
2021-06-29 20:27:07.192253 I | embed: rejected connection from “192.168.0.27:51668” (error “tls: failed to verify client’s certificate: x509: certificate signed by unknown authority (possibly because of "crypto/rsa: verification error" while trying to verify candidate authority certificate "kube-ca")”, ServerName “”)
2021-06-29 20:27:07.584585 I | mvcc: store.index: compact 17393
2021-06-29 20:27:07.615693 I | mvcc: finished scheduled compaction at 17393 (took 27.371259ms)
2021-06-29 20:27:09.639638 W | etcdserver: read-only range request "key:"/registry/leases/kube-system/kube-controller-manager" " with result “range_response_count:1 size:517” took too long (211.426127ms) to execute
2021-06-29 20:27:09.639686 W | etcdserver: read-only range request "key:"/registry/cronjobs/" range_end:"/registry/cronjobs0" limit:500 " with result “range_response_count:0 size:6” took too long (211.928106ms) to execute
2021-06-29 20:27:09.640193 W | etcdserver: request “header:<ID:4125713254345292977 username:"system:node" auth_revision:1 > txn:<compare:<target:MOD key:"/registry/minions/k8scontrol1" mod_revision:17387 > success:<request_put:<key:"/registry/minions/k8scontrol1" value_size:3745 >> failure:<request_range:<key:"/registry/minions/k8scontrol1" > >>” with result “size:18” took too long (144.205915ms) to execute
2021-06-29 20:27:12.216884 I | embed: rejected connection from “192.168.0.27:51670” (error “tls: failed to verify client’s certificate: x509: certificate signed by unknown authority (possibly because of "crypto/rsa: verification error" while trying to verify candidate authority certificate "kube-ca")”, ServerName “”)