Skip to content

Commit b7b8a8d

Browse files
committed
docs: add logs example for the certificate errors troubleshooting
Should simplify the search of this error over the Internet. Signed-off-by: Artem Chernyshev <artem.chernyshev@talos-systems.com>
1 parent 8df5b85 commit b7b8a8d

2 files changed

Lines changed: 12 additions & 0 deletions

File tree

website/content/v1.7/introduction/troubleshooting.md

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -226,6 +226,12 @@ Remove the node from Kubernetes with `kubectl delete node <node-name>`.
226226

227227
This error might appear during initial cluster bootstrap, and it will go away once the Kubernetes API server is up and the node is registered.
228228

229+
The example of Talos logs:
230+
231+
```bash
232+
[talos] controller failed {"component": "controller-runtime", "controller": "k8s.KubeletStaticPodController", "error": "error refreshing pod status: error fetching pod status: Get \"https://127.0.0.1:10250/pods/?timeout=30s\": remote error: tls: internal error"}
233+
```
234+
229235
By default configuration, `kubelet` issues a self-signed server certificate, but when `rotate-server-certificates` feature is enabled,
230236
`kubelet` issues its certificate using `kube-apiserver`.
231237
Make sure the `kubelet` CSR is approved by the Kubernetes API server.

website/content/v1.8/introduction/troubleshooting.md

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -226,6 +226,12 @@ Remove the node from Kubernetes with `kubectl delete node <node-name>`.
226226

227227
This error might appear during initial cluster bootstrap, and it will go away once the Kubernetes API server is up and the node is registered.
228228

229+
The example of Talos logs:
230+
231+
```bash
232+
[talos] controller failed {"component": "controller-runtime", "controller": "k8s.KubeletStaticPodController", "error": "error refreshing pod status: error fetching pod status: Get \"https://127.0.0.1:10250/pods/?timeout=30s\": remote error: tls: internal error"}
233+
```
234+
229235
By default configuration, `kubelet` issues a self-signed server certificate, but when `rotate-server-certificates` feature is enabled,
230236
`kubelet` issues its certificate using `kube-apiserver`.
231237
Make sure the `kubelet` CSR is approved by the Kubernetes API server.

0 commit comments

Comments
 (0)