failed to verify certificate: x509

[weironz]

environment

root@node40:~# flux version
flux: v2.1.2
helm-controller: v0.36.2
image-automation-controller: v0.36.1
image-reflector-controller: v0.30.0
kustomize-controller: v1.1.1
notification-controller: v1.1.0
source-controller: v1.1.2

root@node40:~# kubectl version --short
Flag --short has been deprecated, and will be removed in the future. The --short output will become the default.
Client Version: v1.27.7
Kustomize Version: v5.0.1
Server Version: v1.27.7
root@node40:~# 

create source helm failed with x509

root@node40:~# flux create source helm cert-manager --url https://charts.jetstack.io
✚ generating HelmRepository source
► applying HelmRepository source
✔ source created
◎ waiting for HelmRepository source reconciliation
✗ failed to fetch Helm repository index: failed to cache index to temporary file: Get "https://charts.jetstack.io/index.yaml": tls: failed to verify certificate: x509: certificate has expired or is not yet valid: current time 2023-11-11T11:38:43Z is after 2023-02-07T23:59:59Z

root@node40:~# timedatectl 
               Local time: Sat 2023-11-11 19:43:42 CST
           Universal time: Sat 2023-11-11 11:43:42 UTC
                 RTC time: Sat 2023-11-11 11:43:41
                Time zone: Asia/Shanghai (CST, +0800)
System clock synchronized: yes
              NTP service: active
          RTC in local TZ: no

but later it's success

root@node40:~# flux create source helm cert-manager --url https://charts.jetstack.io
✚ generating HelmRepository source
► applying HelmRepository source
✔ source updated
◎ waiting for HelmRepository source reconciliation
✔ HelmRepository source reconciliation completed
✔ fetched revision: sha256:2b6122bdcaf9877df412a058b1929267ae39516d12ad5d1a64548632a97ab674
root@node40:~# 

[gaalw]

Hi!

It looks like some transient issue. I think it won't reproduce

Or may be you have some issues with corporate proxy or some security solution.