pkgs.k8s.io SSL Certificate Expired
priority/critical-urgentlifecycle/activesig/k8s-infra
### Description
I hope i am at the right place to open this issue. Otherwise please let me know where to open it if it is known.
The SSL certificate for `pkgs.k8s.io` seems to have expired today (2026-04-25), causing `apt update` to fail when using the Kubernetes apt repository.
### Error Message
```
Err:8 https://pkgs.k8s.io/core:/stable:/v1.35/deb InRelease
Certificate verification failed: The certificate is NOT trusted. The certificate chain uses expired certificate. Could not handshake: Error in the certificate verification. [IP: 34.107.204.206 443]
```
### Steps to Reproduce
1. Have any Kubernetes apt repository (e.g. `pkgs.k8s.io/core:/stable:/v1.35/deb`) configured on a Debian/Ubuntu system
2. Run `sudo apt update`
3. Observe certificate verification failure
### Expected Behavior
`apt update` completes successfully with a valid SSL certificate.
### Actual Behavior
`apt update` fails due to an expired certificate on `pkgs.k8s.io`. I could see in my browser that the certificate recently expired:
<img width="1674" height="1070" alt="Image" src="https://github.com/user-attachments/assets/c8734e0e-8759-4377-8a99-fdc459bc6e3f" />
### Impact
From my understanding all users relying on `pkgs.k8s.io` for Kubernetes package installation or updates are affected and cannot pull package metadata until the certificate is renewed.
Thanks for looking into this!
Kind Regards
Vasili
3 条评论