siderolabs / talos

Talos Linux is a modern Linux distribution built for Kubernetes.
https://www.talos.dev
Mozilla Public License 2.0
6.88k stars 553 forks source link

[Talos Quick start guide] "transport: authentication handshake failed: tls: failed to verify certificate: x509: certificate signed by unknown authority" #9241

Open DIGist opened 2 months ago

DIGist commented 2 months ago

I'm following the getting started guide and the secure boot guide. but I seem to be running into a cert error after applying my config. I'm unsure on how to resolve as this is my first time setting up talos. ╰─λ talosctl gen config nexus1 https://192.168.144.3:6443/ --install-image=factory.talos.dev/installer-secureboot/376567988ad370138ad8b2698212367b8edcb69b5fd68c80be1f2ec7d603b4ba:v1.7.6 --install-disk=/dev/sda --config-patch @tpm-disk-encryption.yaml generating PKI and tokens Created /home/user/projects/talosk8s/controlplane.yaml Created /home/user/projects/talosk8s/worker.yaml Created /home/user/projects/talosk8s/talosconfig ╭─user at desktop in ⌁/projects/talosk8s ╰─λ talosctl -n 192.168.144.3 apply-config --insecure -f controlplane.yaml 0 (1.244s) < 23:37:15 ╭─user at desktop in ⌁/projects/talosk8s ╰─λ talosctl bootstrap -n 192.168.144.3 -e 192.168.144.3 --talosconfig=./talosconfig 0 (0.071s) < 23:37:30 error executing bootstrap: rpc error: code = Unavailable desc = connection error: desc = "transport: authentication handshake failed: tls: failed to verify certificate: x509: certificate signed by unknown authority"

smira commented 2 months ago

The commands look fine to me, there aren't too many possibilities at this point, I wonder if it failed to install/apply, and you probably need to see the logs of the machine.