SOLVED How do i fix Failed to start kubernetes cluster for Applications

[Pyronitical]

On the notification menu it says this

Failed to start kubernetes cluster for Applications: [EFAULT] Unable to configure node: Cannot connect to host 127.0.0.1:6443 ssl:True [SSLCertVerificationError: (1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: certificate is not yet valid (_ssl.c:1123)')]​

And This:

Failed to sync OFFICIAL catalog: [EFAULT] Failed to clone 'https://github.com/truenas/charts.git' repository at '/mnt/Storage/ix-applications/catalogs/github_com_truenas_charts_git_master' destination: Cmd('git') failed due to: exit code(128) cmdline: git clone -v https://github.com/truenas/charts.git /mnt/Storage/ix-applications/catalogs/github_com_truenas_charts_git_master stderr: 'Cloning into '/mnt/Storage/ix-applications/catalogs/github_com_truenas_charts_git_master'... fatal: unable to access 'https://github.com/truenas/charts.git/': server certificate verification failed. CAfile: none CRLfile: none '​

Is there any fix fresh install had this problem on an older install too I can ping google.com I have internet access but apps don't work

 

[Pyronitical]

FIXED: Just make sure you date and time match in BIOS and it works

 

[copz1998]

How to change the time to have it match. the BIOS clock?

 

[d1gz0r]

FIXED: Just make sure you date and time match in BIOS and it works

How accurately should these clocks match? I set the hwclock and system data to the same time. The bios time should be ±2 minutes from this time, but I still get this error...

 

[jgreco]

Did you? Be aware that you need to set the BIOS to UTC time, not your local time.

 

[d1gz0r]

Did you? Be aware that you need to set the BIOS to UTC time, not your local time.

That's exactly what I failed with! I realized it half an hour ago and set all time to UTC. It helped with connecting to Truecharts. However I still get [SSLCertVerificationError: (1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: certificate has expired (_ssl.c:1123)')] when I try to change Kubernetes Settings (following suggestions from this thread: https://www.truenas.com/community/threads/apps-stuck-deploying.103308/#post-721965).

 

[jgreco]

Awesome! One of the few things more rewarding than solving someone's issue for them is to see them figure it out on their own.

I don't have the exact answer for your SSL certificate verification issue. I can tell you that it's related to an expired certificate, but finding this may be a bit tricky. I don't use Kube on TrueNAS so I've not got much reason to dig into it (sorry). A potentially somewhat similar expired cert issue came up about a year ago and is discussed at

SSL certificate problem: certificate has expired -- the OpenSSL 1.0.2 vs LetsEncrypt issue

Posted in response to a staff request, this is intended to help answer the "certificate is expired" issues. SSL underpins most network session security on the Internet. Historically, this was implemented with self-signed certificates (a bad idea), or through commercial certificate authorities...

www.truenas.com

but no promises of anything other than some help understanding how this all works.

 

[d1gz0r]

Awesome! One of the few things more rewarding than solving someone's issue for them is to see them figure it out on their own.

I don't have the exact answer for your SSL certificate verification issue. I can tell you that it's related to an expired certificate, but finding this may be a bit tricky. I don't use Kube on TrueNAS so I've not got much reason to dig into it (sorry). A potentially somewhat similar expired cert issue came up about a year ago and is discussed at

SSL certificate problem: certificate has expired -- the OpenSSL 1.0.2 vs LetsEncrypt issue

Posted in response to a staff request, this is intended to help answer the "certificate is expired" issues. SSL underpins most network session security on the Internet. Historically, this was implemented with self-signed certificates (a bad idea), or through commercial certificate authorities...

www.truenas.com

but no promises of anything other than some help understanding how this all works.

The thing is, I just installed the system. I didn't expect to encounter these problems with a fresh instal...

Anyway, thank you! I will check the link.