Skip to content

Upon installation, k3s-agent on nodes giving "failed to get CA certs" #11

@geerlingguy

Description

@geerlingguy
Mar 06 16:34:33 deskpi2 k3s[1282]: time="2024-03-06T16:34:33-06:00" level=info msg="Starting k3s agent v1.28.7+k3s1 (051b14b2)"
Mar 06 16:34:33 deskpi2 k3s[1282]: time="2024-03-06T16:34:33-06:00" level=info msg="Adding server to load balancer k3s-agent-load-balancer: deskpi1.local:6443"
Mar 06 16:34:33 deskpi2 k3s[1282]: time="2024-03-06T16:34:33-06:00" level=info msg="Running load balancer k3s-agent-load-balancer 127.0.0.1:6444 -> [deskpi1.local:6443] [default: deskpi1.local:6443]"
Mar 06 16:34:33 deskpi2 k3s[1282]: time="2024-03-06T16:34:33-06:00" level=error msg="failed to get CA certs: Get \"https://127.0.0.1:6444/cacerts\": read tcp 127.0.0.1:58660->127.0.0.1:6444: read: connection res>
Mar 06 16:34:35 deskpi2 k3s[1282]: time="2024-03-06T16:34:35-06:00" level=error msg="failed to get CA certs: Get \"https://127.0.0.1:6444/cacerts\": EOF"
Mar 06 16:34:37 deskpi2 k3s[1282]: time="2024-03-06T16:34:37-06:00" level=error msg="failed to get CA certs: Get \"https://127.0.0.1:6444/cacerts\": read tcp 127.0.0.1:58122->127.0.0.1:6444: read: connection res>
Mar 06 16:34:39 deskpi2 k3s[1282]: time="2024-03-06T16:34:39-06:00" level=error msg="failed to get CA certs: Get \"https://127.0.0.1:6444/cacerts\": EOF"

I'm guessing it's a DNS issue, because of course it's a DNS issue. I'm trying to use the mDNS names like deskpi1.local, deskpi2.local, and from deskpi2, I can ping deskpi1:

pi@deskpi2:~ $ ping deskpi1.local
PING deskpi1.local (10.0.2.90) 56(84) bytes of data.
64 bytes from cam01.mmoffice.net (10.0.2.90): icmp_seq=1 ttl=64 time=0.260 ms
64 bytes from cam01.mmoffice.net (10.0.2.90): icmp_seq=2 ttl=64 time=0.397 ms
64 bytes from cam01.mmoffice.net (10.0.2.90): icmp_seq=3 ttl=64 time=0.347 ms
64 bytes from cam01.mmoffice.net (10.0.2.90): icmp_seq=4 ttl=64 time=0.353 ms

Gah... now I realize I had reserved that IP earlier for some camera testing, but since it's not active right now, it's reassigning the IP to one of the Pis?

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions