Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Fix solutions for "Lisbon". #53

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Fix solutions for "Lisbon". #53

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion scenarios/lisbon/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -27,6 +27,6 @@ fi

## Clues

<b>1. </b>Running <kbd>etcdctl get foo</kbd> shows an error: <kbd>certificate has expired or is not yet valid: current time ... is after ...</kbd>, it's clear the server time is one year ahead, to fix set the server time to the actual time, for ex: <kbd>sudo date -s "last year"</kbd> (Next "clue" gives the solution).<br><br>
<b>1. </b>Running <kbd>etcdctl get foo</kbd> shows an error: <kbd>certificate has expired or is not yet valid: current time ... is after ...</kbd>, it's clear the server time is one year ahead, to fix set the server time to the actual time, for ex: <kbd>sudo date -s "2023-01-01"</kbd> (Next "clue" gives the solution).<br><br>

<b>2. </b>Not easy to see unless looking for it (for example using <i>tcpdump</i>) but there's an iptables rule that redirects TCP traffic going to the etcd port :2379 into port :443 , and there's an Nginx server listening to that port: <kbd>sudo /usr/sbin/iptables -t nat -L</kbd>, deleting this rule will fix the remaining issue, for ex: <kbd>sudo /usr/sbin/iptables -t nat -F</kbd>