search

kubernetes-retired / spartakus

[EOL] Anonymous Usage Collector
Apache License 2.0
74 stars 30 forks source link

Expired/invalid TLS certificate #16

Closed mgoodness closed 7 years ago

mgoodness commented 7 years ago

Upon running spartakus, the logs show:

E1229 17:26:30.118403       1 volunteer.go:68] failed sending report: HTTP request failed: Post https://spartakus.k8s.io/api/v1: x509: certificate has expired or is not yet valid
philips commented 7 years ago

Looks like it expired 23 days ago. cc @thockin

thockin commented 7 years ago

@ixdy - we missed one. dammit.

On Thu, Dec 29, 2016 at 2:54 PM, Brandon Philips notifications@github.com wrote:

Looks like it expired 23 days ago. cc @thockin https://github.com/thockin

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub https://github.com/kubernetes-incubator/spartakus/issues/16#issuecomment-269706471, or mute the thread https://github.com/notifications/unsubscribe-auth/AFVgVETrAt9oz3bRAM0doydT3_3TnttJks5rNDpDgaJpZM4LXumS .

ixdy commented 7 years ago

d'oh. I can fix.

thockin commented 7 years ago

you're a prince. Is this scripted somewhere?

On Thu, Dec 29, 2016 at 3:22 PM, Jeff Grafton notifications@github.com wrote:

d'oh. I can fix.

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub https://github.com/kubernetes-incubator/spartakus/issues/16#issuecomment-269709125, or mute the thread https://github.com/notifications/unsubscribe-auth/AFVgVEObgqTKrXma0EEWO8dQUG9pXcNWks5rNECsgaJpZM4LXumS .

ixdy commented 7 years ago

Not yet, but most of the hard work is automated away by https://github.com/xenolf/lego:

$ cd <some_private_dir>
$ GCE_PROJECT=<project> lego --email=<email> --dns=gcloud --domains=foo.k8s.io --domains=foo.kubernetes.io run
...
Server responded with a certificate.
$ cd .lego/certificates

and then manually update secrets.

thockin commented 7 years ago

I am AFK rest of today - do you have time and access enough top push this before EOY?

On Thu, Dec 29, 2016 at 3:45 PM, Jeff Grafton notifications@github.com wrote:

Not yet, but most of the hard work is automated away by https://github.com/xenolf/lego:

$ cd $ GCE_PROJECT= lego --email= --dns=gcloud --domains=foo.k8s.io --domains=foo.kubernetes.io run...Server responded with a certificate. $ cd .lego/certificates

and then manually update secrets.

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub https://github.com/kubernetes-incubator/spartakus/issues/16#issuecomment-269711277, or mute the thread https://github.com/notifications/unsubscribe-auth/AFVgVMlyprArGt0Sz9YO9rz5pWLAwgm0ks5rNEYUgaJpZM4LXumS .

ixdy commented 7 years ago

I just updated the secret. It looks like spartakus is using Ingress, so it should be fixed momentarily.

ixdy commented 7 years ago

as in now

ixdy commented 7 years ago

I'm hoping at some point there will be some more production-ready integration between LE and Kubernetes.

For now, it's ~10m of effort to update all of our certs quarterly, and now spartakus is on my radar.

thockin commented 7 years ago

THANKS!!!

On Thu, Dec 29, 2016 at 3:50 PM, Jeff Grafton notifications@github.com wrote:

I'm hoping at some point there will be some more production-ready integration between LE and Kubernetes.

For now, it's ~10m of effort to update all of our certs quarterly, and now spartakus is on my radar.

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub https://github.com/kubernetes-incubator/spartakus/issues/16#issuecomment-269711721, or mute the thread https://github.com/notifications/unsubscribe-auth/AFVgVOYWmnVPzqd4WDntVimgw_qvvpoxks5rNEc9gaJpZM4LXumS .

yuvipanda commented 7 years ago

Should this be closed? :)