search

kubesphere / kubesphere

The container platform tailored for Kubernetes multi-cloud, datacenter, and edge management ⎈ 🖥 ☁️
https://kubesphere.io
Apache License 2.0
14.67k stars 2.11k forks source link

Update user failed to verify certificate: x509: certificate has expired or is not yet valid because of timezone. #6117

Open ygqygq2 opened 4 weeks ago

ygqygq2 commented 4 weeks ago 
Internal error occurred: failed calling webhook "users.iam.kubesphere.io": failed to call webhook: Post "https://ks-controller-manager.kubesphere-system.svc:443/validate-email-iam-kubesphere-io-v1alpha2?timeout=30s": tls: failed to verify certificate: x509: certificate has expired or is not yet valid: current time 2024-06-11T11:01:48Z is before 2024-06-11T16:13:47Z

image

tanqidi commented 4 weeks ago

do you have a network policy for kubesphere ？

ygqygq2 commented 4 weeks ago

do you have a network policy for kubesphere ？

This can be a problem with certificate rotation in different time zones, not only kubesphere. This error is not reported now, because the time is within the time expected for the certificate