We have once again been having issues with LinkerD. Seems this happens every couple years. This time we saw that our pods were failing to start. This included the linkerd pods themselves. We saw this in both our dev and main clusters so it must be something with our setup. At first restarting t…

This looks to me like your webhook certificates have expired. What does linkerd check say?

For anyone who finds this later, this was a case where the upgrade to cert-manager 1.18 broke a setup that had only a single entry in trust-manager’s sources list. The current Linkerd docs on setting up cert-manager and trust-manager have a lot more detail on the recommended setup.

Trouble with trusted anchors. I don't know where to look

Linkerd General Discussion

mmclane July 3, 2025, 4:30pm 3

All along linkerd check comes back clean. No issues

Topic		Replies	Views
ERROR: failed to verify issuer credentials for 'identity.linkerd.cluster.local' with trust anchors: x509: certificate has expired or is not yet valid Linkerd General Discussion certificates	4	2119	January 22, 2024
Cert is not issued by the trust anchor error after a couple days Linkerd General Discussion proxy , certificates	1	250	November 25, 2024
[Cert-Manager] Webhook Certificates renewal Failure Linkerd General Discussion certificates	4	1702	August 16, 2023
Linkerd check --proxy Linkerd General Discussion certificates	3	71	December 31, 2024
linkerd-Identity-Issuer not refreshing certificates as expected Linkerd General Discussion proxy , configuration , mtls , certificates	5	219	January 8, 2026

Trouble with trusted anchors. I don't know where to look

Related topics