diff --git a/linkerd.io/content/2-edge/tasks/troubleshooting.md b/linkerd.io/content/2-edge/tasks/troubleshooting.md index 9b3072f6e2..f22d92714b 100644 --- a/linkerd.io/content/2-edge/tasks/troubleshooting.md +++ b/linkerd.io/content/2-edge/tasks/troubleshooting.md @@ -1631,6 +1631,18 @@ entries. Here you need to make sure the certificate was issued specifically for `tap.linkerd-viz.svc`. +```bash +× tap API server has valid cert + anchors not within their validity period: + * tap.linkerd-viz.svc not valid anymore. Expired on + see https://linkerd.io/checks/#l5d-tap-cert-valid for hints +``` + +Here you need to rotate the expired certificate, see +[Rotating webhooks certificates](../rotating_webhooks_certificates/) for a single rotation or +[Automatically Rotating your webhook TLS Credentials](../automatically-rotating-webhook-tls-credentials/) +for automatic rotation which won't incur downtime. + ### √ tap API server cert is valid for at least 60 days {#l5d-tap-cert-not-expiring-soon} Example failure: diff --git a/linkerd.io/content/2.10/tasks/troubleshooting.md b/linkerd.io/content/2.10/tasks/troubleshooting.md index 98e4a0ce77..b0596a144c 100644 --- a/linkerd.io/content/2.10/tasks/troubleshooting.md +++ b/linkerd.io/content/2.10/tasks/troubleshooting.md @@ -1677,6 +1677,18 @@ entries. Here you need to make sure the certificate was issued specifically for `tap.linkerd-viz.svc`. +```bash +× tap API server has valid cert + anchors not within their validity period: + * tap.linkerd-viz.svc not valid anymore. Expired on + see https://linkerd.io/checks/#l5d-tap-cert-valid for hints +``` + +Here you need to rotate the expired certificate, see +[Rotating webhooks certificates](../rotating_webhooks_certificates/) for a single rotation or +[Automatically Rotating your webhook TLS Credentials](../automatically-rotating-webhook-tls-credentials/) +for automatic rotation which won't incur downtime. + ### √ tap API server cert is valid for at least 60 days {#l5d-tap-cert-not-expiring-soon} Example failure: diff --git a/linkerd.io/content/2.11/tasks/troubleshooting.md b/linkerd.io/content/2.11/tasks/troubleshooting.md index 7bff2a478a..fbd6a6da56 100644 --- a/linkerd.io/content/2.11/tasks/troubleshooting.md +++ b/linkerd.io/content/2.11/tasks/troubleshooting.md @@ -1823,6 +1823,18 @@ entries. Here you need to make sure the certificate was issued specifically for `tap.linkerd-viz.svc`. +```bash +× tap API server has valid cert + anchors not within their validity period: + * tap.linkerd-viz.svc not valid anymore. Expired on + see https://linkerd.io/checks/#l5d-tap-cert-valid for hints +``` + +Here you need to rotate the expired certificate, see +[Rotating webhooks certificates](../rotating_webhooks_certificates/) for a single rotation or +[Automatically Rotating your webhook TLS Credentials](../automatically-rotating-webhook-tls-credentials/) +for automatic rotation which won't incur downtime. + ### √ tap API server cert is valid for at least 60 days {#l5d-tap-cert-not-expiring-soon} Example failure: diff --git a/linkerd.io/content/2.12/tasks/troubleshooting.md b/linkerd.io/content/2.12/tasks/troubleshooting.md index 9b3072f6e2..f22d92714b 100644 --- a/linkerd.io/content/2.12/tasks/troubleshooting.md +++ b/linkerd.io/content/2.12/tasks/troubleshooting.md @@ -1631,6 +1631,18 @@ entries. Here you need to make sure the certificate was issued specifically for `tap.linkerd-viz.svc`. +```bash +× tap API server has valid cert + anchors not within their validity period: + * tap.linkerd-viz.svc not valid anymore. Expired on + see https://linkerd.io/checks/#l5d-tap-cert-valid for hints +``` + +Here you need to rotate the expired certificate, see +[Rotating webhooks certificates](../rotating_webhooks_certificates/) for a single rotation or +[Automatically Rotating your webhook TLS Credentials](../automatically-rotating-webhook-tls-credentials/) +for automatic rotation which won't incur downtime. + ### √ tap API server cert is valid for at least 60 days {#l5d-tap-cert-not-expiring-soon} Example failure: diff --git a/linkerd.io/content/2.13/tasks/troubleshooting.md b/linkerd.io/content/2.13/tasks/troubleshooting.md index 9b3072f6e2..f22d92714b 100644 --- a/linkerd.io/content/2.13/tasks/troubleshooting.md +++ b/linkerd.io/content/2.13/tasks/troubleshooting.md @@ -1631,6 +1631,18 @@ entries. Here you need to make sure the certificate was issued specifically for `tap.linkerd-viz.svc`. +```bash +× tap API server has valid cert + anchors not within their validity period: + * tap.linkerd-viz.svc not valid anymore. Expired on + see https://linkerd.io/checks/#l5d-tap-cert-valid for hints +``` + +Here you need to rotate the expired certificate, see +[Rotating webhooks certificates](../rotating_webhooks_certificates/) for a single rotation or +[Automatically Rotating your webhook TLS Credentials](../automatically-rotating-webhook-tls-credentials/) +for automatic rotation which won't incur downtime. + ### √ tap API server cert is valid for at least 60 days {#l5d-tap-cert-not-expiring-soon} Example failure: diff --git a/linkerd.io/content/2.9/tasks/troubleshooting.md b/linkerd.io/content/2.9/tasks/troubleshooting.md index efa243e499..fae0383b71 100644 --- a/linkerd.io/content/2.9/tasks/troubleshooting.md +++ b/linkerd.io/content/2.9/tasks/troubleshooting.md @@ -787,6 +787,18 @@ entries. Here you need to make sure the certificate was issued specifically for `linkerd-tap.linkerd.svc`. +```bash +× tap API server has valid cert + anchors not within their validity period: + * tap.linkerd-viz.svc not valid anymore. Expired on + see https://linkerd.io/checks/#l5d-tap-cert-valid for hints +``` + +Here you need to rotate the expired certificate, see +[Rotating webhooks certificates](../rotating_webhooks_certificates/) for a single rotation or +[Automatically Rotating your webhook TLS Credentials](../automatically-rotating-webhook-tls-credentials/) +for automatic rotation which won't incur downtime. + ### √ webhook cert is valid for at least 60 days {#l5d-webhook-cert-not-expiring-soon} Example failure: