CN-Series with Rancher: Awaiting certificate

CN-Series with Rancher: Awaiting certificate

8620
Created On 10/29/20 17:17 PM - Last Modified 07/11/25 20:10 PM


Symptom


  • CN-Series with Rancher waiting for signed certificates.
  • Check the init container logs.
>> kubectl logs  pan-mgmt-sts-0 -n kube-system -c pan-mgmt-init

09-22-2020 10:51:26.817133 UTC INFO: Created CSR pan-mgmt-svc.kube-system.pan-mgmt-sts-1-sw

09-22-2020 10:51:26.81721 UTC INFO: Approving CSR pan-mgmt-svc.kube-system.pan-mgmt-sts-1-sw

09-22-2020 10:51:26.851033 UTC INFO: CSR Approved pan-mgmt-svc.kube-system.pan-mgmt-sts-1-sw

09-22-2020 10:51:26.851094 UTC INFO: Waiting for Certificate...

09-22-2020 10:51:26.863172 UTC INFO: Waiting for Certificate...

09-22-2020 10:51:36.287139 UTC INFO: Waiting for Certificate...

09-22-2020 10:51:36.309665 UTC INFO: Waiting for Certificate...

09-22-2020 10:51:36.313269 UTC INFO: Waiting for Certificate...

09-22-2020 10:51:36.372682 UTC INFO: Waiting for Certificate...

  •  
Check the CSR status:
>>  kubectl get csr -n kube-system

Environment


  • Platform: CN-Series

  • PAN-OS / Plugin Version: ANY

  • Deployment: Any

Cause


  • Rancher is not in the officially supported platform/OS (the tool does create rancher OS envt. where most system component run as docker container)

Resolution
Other users also viewed:
Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000HBPICA4&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language