kubernetes/minikube

Auto-refresh kubeadm certs after they expire "certificate has expired or is not yet valid"

Open

#8,943 opened on Aug 8, 2020

View on GitHub
 (6 comments) (0 reactions) (0 assignees)Go (31,799 stars) (5,222 forks)batch import
help wantedkind/buglifecycle/frozenpriority/backlog

Description

Steps to reproduce the issue:

  1. Installed docker for desktop on my MacBook

  2. Executed 'minikube start'

  3. got the error. Please see the below log details. 😄 minikube v1.12.2 on Darwin 10.15.5 ✨ Automatically selected the docker driver ❗ Requested memory allocation (1991MB) is less than the recommended minimum 2000MB. Kubernetes may crash unexpectedly. ❗ Your system has 8192MB memory but Docker has only 1991MB. For a better performance increase to at least 3GB.

    Docker for Desktop > Settings > Resources > Memory

👍 Starting control plane node minikube in cluster minikube 🔥 Creating docker container (CPUs=2, Memory=1991MB) ... 🐳 Preparing Kubernetes v1.18.3 on Docker 19.03.8 ... 🔎 Verifying Kubernetes components... ❗ Enabling 'default-storageclass' returned an error: running callbacks: [Error making standard the default storage class: Error listing StorageClasses: Unauthorized] 🌟 Enabled addons: default-storageclass, storage-provisioner

💣 failed to start node: startup failed: wait 6m0s for node: wait for healthy API server: controlPlane never updated to v1.18.3

😿 minikube is exiting due to an error. If the above message is not useful, open an issue: 👉 https://github.com/kubernetes/minikube/issues/new/choose

Full output of minikube start command used, if not already included:

😄 minikube v1.12.2 on Darwin 10.15.5 ✨ Automatically selected the docker driver ❗ Requested memory allocation (1991MB) is less than the recommended minimum 2000MB. Kubernetes may crash unexpectedly. ❗ Your system has 8192MB memory but Docker has only 1991MB. For a better performance increase to at least 3GB.

Docker for Desktop  > Settings > Resources > Memory

👍 Starting control plane node minikube in cluster minikube 🔥 Creating docker container (CPUs=2, Memory=1991MB) ... 🐳 Preparing Kubernetes v1.18.3 on Docker 19.03.8 ... 🔎 Verifying Kubernetes components... ❗ Enabling 'default-storageclass' returned an error: running callbacks: [Error making standard the default storage class: Error listing StorageClasses: Unauthorized] 🌟 Enabled addons: default-storageclass, storage-provisioner

💣 failed to start node: startup failed: wait 6m0s for node: wait for healthy API server: controlPlane never updated to v1.18.3

😿 minikube is exiting due to an error. If the above message is not useful, open an issue: 👉 https://github.com/kubernetes/minikube/issues/new/choose

Optional: Full output of minikube logs command:

==> kernel <== 20:05:15 up 21 min, 0 users, load average: 0.18, 0.24, 0.25 Linux minikube 4.19.76-linuxkit #1 SMP Tue May 26 11:42:35 UTC 2020 x86_64 x86_64 x86_64 GNU/Linux PRETTY_NAME="Ubuntu 20.04 LTS"

==> kube-apiserver [254ba48dcc19] <== E0808 19:56:35.440774 1 authentication.go:53] Unable to authenticate the request due to an error: x509: certificate has expired or is not yet valid E0808 19:56:35.940585 1 authentication.go:53] Unable to authenticate the request due to an error: x509: certificate has expired or is not yet valid E0808 19:56:36.440291 1 authentication.go:53] Unable to authenticate the request due to an error: x509: cer

Contributor guide

Tech stack
goshelldocker
Domain
devopsinfrastructure
Issue type
bug
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
4
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
over 1 week
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
stale
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
mostly clear
Prerequisites
Kubernetes certificateskubeadmminikubeGo
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
20
Research direction
The issue reports that kubeadm certificates expire, causing minikube startup failure. Investigate the minikube source code, particularly the certificate generation and management in the 'pkg/minikube' directory, and kubeadm's automatic certificate renewal mechanisms. Consider proposing a fix that either auto refreshes certificates before they expire or provides a clear error message with recovery steps.