I have lots of unexplained errors in kubernetes. Often I see errors in logs of pods with the following:

Get{REDACTED}: x509: certificate is valid for, not}

I am using Canonical's distribution of Kubernetes deployed with Juju on a MAAS cluster.

1 Answer 1


Try to remove the easyrsa relation with kubernetes-master in juju.

juju remove-relation easyrsa kubernetes-master

Recreate it afterwards:

juju add-relation easyrsa kubernetes-master

The certificate seems to be recreated for the master, which should now include it's clusterip ( address as well in the SAN record of the certificate.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.