ITADN

pkgs.k8s.io SSL Certificate Expired

#9389Openvasili1 创建于 2026-04-25
priority/critical-urgentlifecycle/activesig/k8s-infra
V
vasili1commented
### Description I hope i am at the right place to open this issue. Otherwise please let me know where to open it if it is known. The SSL certificate for `pkgs.k8s.io` seems to have expired today (2026-04-25), causing `apt update` to fail when using the Kubernetes apt repository. ### Error Message ``` Err:8 https://pkgs.k8s.io/core:/stable:/v1.35/deb InRelease Certificate verification failed: The certificate is NOT trusted. The certificate chain uses expired certificate. Could not handshake: Error in the certificate verification. [IP: 34.107.204.206 443] ``` ### Steps to Reproduce 1. Have any Kubernetes apt repository (e.g. `pkgs.k8s.io/core:/stable:/v1.35/deb`) configured on a Debian/Ubuntu system 2. Run `sudo apt update` 3. Observe certificate verification failure ### Expected Behavior `apt update` completes successfully with a valid SSL certificate. ### Actual Behavior `apt update` fails due to an expired certificate on `pkgs.k8s.io`. I could see in my browser that the certificate recently expired: <img width="1674" height="1070" alt="Image" src="https://github.com/user-attachments/assets/c8734e0e-8759-4377-8a99-fdc459bc6e3f" /> ### Impact From my understanding all users relying on `pkgs.k8s.io` for Kubernetes package installation or updates are affected and cannot pull package metadata until the certificate is renewed. Thanks for looking into this! Kind Regards Vasili
3 条评论