I’m running k3s under Centos 8 Stream. Seems like upgrade worked before but might fail due to some certificate CA issues (related to Let’s Encrypt?).
I was able to upgrade using the manual method just fine. (1.21.4 → 1.21.5).
$ sudo kubectl version
Client Version: version.Info{Major:“1”, Minor:“21”, GitVersion:“v1.21.5+k3s1”, GitCommit:“acad8ef8402021d6a78405c0b4fe420982e5ad1e”, GitTreeState:“clean”, BuildDate:“2021-09-20T17:40:35Z”, GoVersion:“go1.16.8”, Compiler:“gc”, Platform:“linux/amd64”}
Server Version: version.Info{Major:“1”, Minor:“21”, GitVersion:“v1.21.5+k3s1”, GitCommit:“acad8ef8402021d6a78405c0b4fe420982e5ad1e”, GitTreeState:“clean”, BuildDate:“2021-09-20T17:40:35Z”, GoVersion:“go1.16.8”, Compiler:“gc”, Platform:“linux/amd64”}
Logs:
E1004 13:41:40.686226 1 controller.go:135] error syncing ‘system-upgrade/agent-plan’: handler system-upgrade-controller: Get https://update.k3s.io/v1-release/channels/stable: x509: certificate signed by unknown authority, requeuing
E1004 13:52:52.440906 1 controller.go:135] error syncing ‘system-upgrade/server-plan’: handler system-upgrade-controller: Get https://update.k3s.io/v1-release/channels/stable: x509: certificate signed by unknown authority, requeuing
Checked the mounts for the /etc/ssl directory:
Mounts:
/etc/ssl from etc-ssl (rw)
/tmp from tmp (rw)
/var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-987sp (ro)
…
Volumes:
etc-ssl:
Type: HostPath (bare host directory volume)
Path: /etc/ssl
HostPathType: Directory
I can curl without any issues to the upgrade server from that Centos 8 box.
Anything else I should be checking on?