# RKE Cert Failure - Cannot deploy using RKE

**URL:** <https://forums.suse.com/t/rke-cert-failure-cannot-deploy-using-rke/19825>\
**Category:** SUSE Rancher Prime\
**Created:** [March 16, 2021, 5:19pm UTC](https://forums.suse.com/t/rke-cert-failure-cannot-deploy-using-rke/19825 "2021-03-16T17:19:27Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![icsy7867](https://sea2.discourse-cdn.com/flex022/user_avatar/forums.suse.com/icsy7867/32/8753_2.png) [@icsy7867](https://forums.suse.com/u/icsy7867)\
**Post date:** [March 16, 2021, 5:19pm UTC](https://forums.suse.com/t/rke-cert-failure-cannot-deploy-using-rke/19825/1 "2021-03-16T17:19:27Z")

</div>

I have tried almost everything i can think of. I have a post here:

> <https://github.com/rancher/rke/issues/2487>
>
> I am at a loss. Any suggestions/help would be much appreciated.
> RKE version:
> 1.2.6
> Docker version: (docker version,docker info preferred)
> Client:
> Context: default
> Debug Mode:...

I believe my ceerts expired and I tried to do an ./rke cert rotate which resulted in a failure to find the old certs. I tried copying everything from /etc/kubernetes/ssl to /etc/kubernetes/.tmp per some documentation I found but to no avail.

````
```
rke cert rotate
INFO[0000] Running RKE version: v1.2.6
INFO[0000] Initiating Kubernetes cluster
INFO[0000] Rotating Kubernetes cluster certificates
FATA[0000] Failed to rotate certificates: can't find old certificates
```

````

I also tried to remove my cluster.rkestate and delete my certs and tried to redeploy, but I am still met with timeout and TLS errors when trying to verify the cluster.

```auto
kubectl get cs
Warning: v1 ComponentStatus is deprecated in v1.19+
NAME STATUS MESSAGE ERROR
scheduler Healthy ok
controller-manager Healthy ok
etcd-2 Unhealthy Get "https://172.181.30.27:2379/health": read tcp 172.181.30.26:38402->172.181.30.27:2379: read: connection reset by peer
etcd-1 Unhealthy Get "https://172.181.30.25:2379/health": net/http: request canceled while waiting for connection (Client.Timeout exceeded while awaiting headers)
etcd-0 Unhealthy Get "https://172.181.30.26:2379/health": net/http: request canceled while waiting for connection (Client.Timeout exceeded while awaiting headers)

```

I have even tried to rebuild a node, copy my ETCD backup and restore using RKE. This appeared to have worked, but all my my pods are stuck in a “pending” state due to have no “schedulable” nodes.

I also tried to take down my cluster to a single master node to reduce variables and tried to deploy using the existing cluster here. I am completely out of ideas and it might be time to rebuild. Wanted to reach out to see if anyone had any ideas. Thank you!