自签证书是出什么问题了吗？

[joenzx]

创建bundle.yaml后apiservice有问题

查看pod日志

E0518 02:23:06.266875 1 authentication.go:63] "Unable to authenticate the request" err="[x509: certificate has expired or is not yet valid: current time 2022-05-18T02:23:06Z is after 2022-05-14T07:07:34Z, verifying certificate SN=4031439202884110863, SKID=, AKID= failed: x509: certificate has expired or is not yet valid: current time 2022-05-18T02:23:06Z is after 2022-05-14T07:07:34Z]"
E0518 02:23:06.266887 1 authentication.go:63] "Unable to authenticate the request" err="[x509: certificate has expired or is not yet valid: current time 2022-05-18T02:23:06Z is after 2022-05-14T07:07:34Z, verifying certificate SN=4031439202884110863, SKID=, AKID= failed: x509: certificate has expired or is not yet valid: current time 2022-05-18T02:23:06Z is after 2022-05-14T07:07:34Z]"
E0518 02:23:06.266874 1 authentication.go:63] "Unable to authenticate the request" err="[x509: certificate has expired or is not yet valid: current time 2022-05-18T02:23:06Z is after 2022-05-14T07:07:34Z, verifying certificate SN=4031439202884110863, SKID=, AKID= failed: x509: certificate has expired or is not yet valid: current time 2022-05-18T02:23:06Z is after 2022-05-14T07:07:34Z]"
E0518 02:23:06.266962 1 authentication.go:63] "Unable to authenticate the request" err="[x509: certificate has expired or is not yet valid: current time 2022-05-18T02:23:06Z is after 2022-05-14T07:07:34Z, verifying certificate SN=4031439202884110863, SKID=, AKID= failed: x509: certificate has expired or is not yet valid: current time 2022-05-18T02:23:06Z is after 2022-05-14T07:07:34Z]"

这是不是webhook应用自己给自己颁发证书时出问题了呀？

[joenzx]

k8s版本 1.18.4

[myoss]

我最近遇到这个错误，死活都不能自动续期证书了，

E0616 09:17:26.356775 1 sync.go:186] cert-manager/challenges "msg"="propagation check failed

[ybxb8615]

我也碰到了，老师，如何解决呢？我的环境是：二进制安装的v1.25.16，用的是cert-manager v1.16.4

E0222 13:26:50.204705 1 authentication.go:63] "Unable to authenticate the request" err="[x509: subject with cn=front-proxy-client is not in the allowed list, verifying certificate SN=173653898138209718049315545100479903319089544903, SKID=E5:35:74:E2:49:45:93:89:3C:B1:4B:82:49:D7:96:5C:19:A5:61:62, AKID=C7:B9:61:73:94:7A:BD:51:D5:A6:E3:D2:BB:CB:62:88:8A:13:EC:4E failed: x509: certificate signed by unknown authority]"
E0222 13:26:50.204780 1 authentication.go:63] "Unable to authenticate the request" err="[x509: subject with cn=front-proxy-client is not in the allowed list, verifying certificate SN=173653898138209718049315545100479903319089544903, SKID=E5:35:74:E2:49:45:93:89:3C:B1:4B:82:49:D7:96:5C:19:A5:61:62, AKID=C7:B9:61:73:94:7A:BD:51:D5:A6:E3:D2:BB:CB:62:88:8A:13:EC:4E failed: x509: certificate signed by unknown authority]"
E0222 13:26:50.204783 1 authentication.go:63] "Unable to authenticate the request" err="[x509: subject with cn=front-proxy-client is not in the allowed list, verifying certificate SN=173653898138209718049315545100479903319089544903, SKID=E5:35:74:E2:49:45:93:89:3C:B1:4B:82:49:D7:96:5C:19:A5:61:62, AKID=C7:B9:61:73:94:7A:BD:51:D5:A6:E3:D2:BB:CB:62:88:8A:13:EC:4E failed: x509: certificate signed by unknown authority]"
E0222 13:26:50.204705 1 authentication.go:63] "Unable to authenticate the request" err="[x509: subject with cn=front-proxy-client is not in the allowed list, verifying certificate SN=173653898138209718049315545100479903319089544903, SKID=E5:35:74:E2:49:45:93:89:3C:B1:4B:82:49:D7:96:5C:19:A5:61:62, AKID=C7:B9:61:73:94:7A:BD:51:D5:A6:E3:D2:BB:CB:62:88:8A:13:EC:4E failed: x509: certificate signed by unknown authority]"
E0222 13:26:50.204711 1 authentication.go:63] "Unable to authenticate the request" err="[x509: subject with cn=front-proxy-client is not in the allowed list, verifying certificate SN=173653898138209718049315545100479903319089544903, SKID=E5:35:74:E2:49:45:93:89:3C:B1:4B:82:49:D7:96:5C:19:A5:61:62, AKID=C7:B9:61:73:94:7A:BD:51:D5:A6:E3:D2:BB:CB:62:88:8A:13:EC:4E failed: x509: certificate signed by unknown authority]"