linkerd-webhooks-and-apisvc-tls
× proxy-injector webhook has valid cert
anchors not within their validity period:
* 147892185609361118105547867649820840928 linkerd-proxy-injector.linkerd.svc not valid anymore. Expired on 2025-08-26T16:12:36Z
see Checks | Linkerd for hints
Status check results are ×
Currently we are using stable-2.14.10, got standard linkerd license, hasn’t got chance to upgrade yet.
Image: cr.l5d.io/linkerd/controller:stable-2.14.10
Image ID: cr.l5d.io/linkerd/controller@sha256:65bed6a346b259cb1ff04420ee296afa28c38cb3e789ce285e5987f039dddf45
Now I’m trying to upgrade to Linkerd version 2.18.3 with standard plan license, I got the error + linkerd upgrade --set disableHeartBeat=true --set identity.externalCA=true --set proxyInit.runAsRoot=true | kubectl apply -f -
Command "upgrade" is deprecated, and will be removed in a future release. Please install the Linkerd dashboard instead. See https://docs.buoyant.io/linkerd-dashboard/getting-started/
secrets "linkerd-identity-issuer" not found
error: no objects passed to apply
$ linkerd check
kubernetes-api
√ can initialize the client
√ can query the Kubernetes API
kubernetes-version
√ is running the minimum Kubernetes API version
linkerd-existence
√ ‘linkerd-config’ config map exists
√ heartbeat ServiceAccount exist
√ control plane replica sets are ready
√ no unschedulable pods
√ control plane pods are ready
√ cluster networks contains all pods
√ cluster networks contains all services
linkerd-config
√ control plane Namespace exists
√ control plane ClusterRoles exist
√ control plane ClusterRoleBindings exist
√ control plane ServiceAccounts exist
√ control plane CustomResourceDefinitions exist
√ control plane MutatingWebhookConfigurations exist
√ control plane ValidatingWebhookConfigurations exist
√ proxy-init container runs as root user if docker container runtime is used
linkerd-identity
× certificate config is valid
secrets “linkerd-identity-issuer” not found
see Checks | Linkerd for hints
Status check results are ×