Tls: failed to verify certificate: x

I just got LinkerD installed on our Dev cluster. It looks like everything is setup and working. I was able to add a few things to the mesh. I don’t see any errors in the linkerd-proxy container. But when I look at the pod in the linkerd dashboard I see the following error in the bottom left corner. It’s not a single steady error but instead it flashes by repeatedly. Any ideas on what this might be?

I am guessing it has something to do with the live calls. I don’t see any data in that section.

Ah… I found something.
× tap API server has valid cert
cert is not issued by the trust anchor: x509: certificate is valid for tap.linkerd-viz.svc, not tap.linkerd.svc
see Linkerd Check Redirection for hints

So when I installed linkerd-viz I put it in the same namespace as linkerd (linkerd instead of linkerd-viz). I just didn’t want to have everything separated out. So the certificate is there as is the service account but not in the linkerd-viz namespace. How can I adjust that in the helm chart so that the cert becomes valid?

I sorted it out.

I had to update the tap and linkerd-tap-injector certificates because I hadn’t change the commonName or dnsNames when I changed the namespace.

1 Like