System-upgrade-controller 提示 x509: certificate signed by unknown authority

环境信息:
K3s 版本:

k3s version v1.22.7+k3s1 (8432d7f2)
go version go1.16.10

节点 CPU 架构、操作系统和版本::

Linux fulgens 5.14.21-150400.24.18-default #1 SMP PREEMPT_DYNAMIC Thu Aug 4 14:17:48 UTC 2022 (e9f7bfc) aarch64 aarch64 aarch64 GNU/Linux

集群配置:

NAME         STATUS     ROLES                  AGE     VERSION
retriever    NotReady   <none>                 146d    v1.22.7+k3s1
cricetulus   Ready      <none>                 24d     v1.23.5+k3s-fbfa51e5-dirty
carpio       Ready      <none>                 43h     v1.24.4+k3s1
cat          Ready      <none>                 146d    v1.22.7+k3s1
etvp-mini    Ready      <none>                 4d15h   v1.24.3+k3s1
fulgens      Ready      control-plane,master   146d    v1.22.7+k3s1

问题描述:
按照 自动升级 | Rancher文档 这个文档配置自动升级。然后选择 Release v1.24.4+k3s1 · k3s-io/k3s · GitHub 这个作为 channel ,然后就发现了问题:

time="2022-08-28T03:28:22Z" level=error msg="error syncing 'system-upgrade/server-plan': handler system-upgrade-controller: Get \"https://update.k3s.io/v1-release/channels/stable\": x509: certificate signed by unknown authority, requeuing"

复现步骤:
就是按照上面提到的文档做的。

附加上下文/日志:

日志
$ kubectl -n system-upgrade logs system-upgrade-controller-8677c8fb4-n5snf system-upgrade-controller
W0828 03:21:41.394543       1 client_config.go:552] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
time="2022-08-28T03:21:41Z" level=info msg="Applying CRD plans.upgrade.cattle.io"
time="2022-08-28T03:21:41Z" level=info msg="Waiting for CRD plans.upgrade.cattle.io to become available"
time="2022-08-28T03:21:42Z" level=info msg="Done waiting for CRD plans.upgrade.cattle.io to become available"
time="2022-08-28T03:21:42Z" level=info msg="Starting /v1, Kind=Secret controller"
time="2022-08-28T03:21:42Z" level=info msg="Starting /v1, Kind=Node controller"
time="2022-08-28T03:21:42Z" level=info msg="Starting batch/v1, Kind=Job controller"
time="2022-08-28T03:21:42Z" level=info msg="Starting upgrade.cattle.io/v1, Kind=Plan controller"
time="2022-08-28T03:26:03Z" level=error msg="error syncing 'system-upgrade/agent-plan': handler system-upgrade-controller: Get \"https://update.k3s.io/v1-release/channels/stable\": x509: certificate signed by unknown authority, requeuing"
time="2022-08-28T03:26:03Z" level=error msg="error syncing 'system-upgrade/server-plan': handler system-upgrade-controller: Get \"https://update.k3s.io/v1-release/channels/stable\": x509: certificate signed by unknown authority, requeuing"
time="2022-08-28T03:26:03Z" level=error msg="error syncing 'system-upgrade/server-plan': handler system-upgrade-controller: Get \"https://update.k3s.io/v1-release/channels/stable\": x509: certificate signed by unknown authority, requeuing"
time="2022-08-28T03:26:03Z" level=error msg="error syncing 'system-upgrade/agent-plan': handler system-upgrade-controller: Get \"https://update.k3s.io/v1-release/channels/stable\": x509: certificate signed by unknown authority, requeuing"
time="2022-08-28T03:26:04Z" level=error msg="error syncing 'system-upgrade/server-plan': handler system-upgrade-controller: Get \"https://update.k3s.io/v1-release/channels/stable\": x509: certificate signed by unknown authority, requeuing"
time="2022-08-28T03:26:04Z" level=error msg="error syncing 'system-upgrade/agent-plan': handler system-upgrade-controller: Get \"https://update.k3s.io/v1-release/channels/stable\": x509: certificate signed by unknown authority, requeuing"
time="2022-08-28T03:26:04Z" level=error msg="error syncing 'system-upgrade/agent-plan': handler system-upgrade-controller: Get \"https://update.k3s.io/v1-release/channels/stable\": x509: certificate signed by unknown authority, requeuing"
time="2022-08-28T03:26:04Z" level=error msg="error syncing 'system-upgrade/server-plan': handler system-upgrade-controller: Get \"https://update.k3s.io/v1-release/channels/stable\": x509: certificate signed by unknown authority, requeuing"
time="2022-08-28T03:26:05Z" level=error msg="error syncing 'system-upgrade/agent-plan': handler system-upgrade-controller: Get \"https://update.k3s.io/v1-release/channels/stable\": x509: certificate signed by unknown authority, requeuing"
time="2022-08-28T03:26:05Z" level=error msg="error syncing 'system-upgrade/server-plan': handler system-upgrade-controller: Get \"https://update.k3s.io/v1-release/channels/stable\": x509: certificate signed by unknown authority, requeuing"
time="2022-08-28T03:26:05Z" level=error msg="error syncing 'system-upgrade/server-plan': handler system-upgrade-controller: Get \"https://update.k3s.io/v1-release/channels/stable\": x509: certificate signed by unknown authority, requeuing"
time="2022-08-28T03:26:05Z" level=error msg="error syncing 'system-upgrade/agent-plan': handler system-upgrade-controller: Get \"https://update.k3s.io/v1-release/channels/stable\": x509: certificate signed by unknown authority, requeuing"
time="2022-08-28T03:26:06Z" level=error msg="error syncing 'system-upgrade/server-plan': handler system-upgrade-controller: Get \"https://update.k3s.io/v1-release/channels/stable\": x509: certificate signed by unknown authority, requeuing"
time="2022-08-28T03:26:06Z" level=error msg="error syncing 'system-upgrade/agent-plan': handler system-upgrade-controller: Get \"https://update.k3s.io/v1-release/channels/stable\": x509: certificate signed by unknown authority, requeuing"
time="2022-08-28T03:26:07Z" level=error msg="error syncing 'system-upgrade/server-plan': handler system-upgrade-controller: Get \"https://update.k3s.io/v1-release/channels/stable\": x509: certificate signed by unknown authority, requeuing"
time="2022-08-28T03:26:07Z" level=error msg="error syncing 'system-upgrade/agent-plan': handler system-upgrade-controller: Get \"https://update.k3s.io/v1-release/channels/stable\": x509: certificate signed by unknown authority, requeuing"
time="2022-08-28T03:26:08Z" level=error msg="error syncing 'system-upgrade/agent-plan': handler system-upgrade-controller: Get \"https://update.k3s.io/v1-release/channels/stable\": x509: certificate signed by unknown authority, requeuing"
time="2022-08-28T03:26:08Z" level=error msg="error syncing 'system-upgrade/server-plan': handler system-upgrade-controller: Get \"https://update.k3s.io/v1-release/channels/stable\": x509: certificate signed by unknown authority, requeuing"
time="2022-08-28T03:26:09Z" level=error msg="error syncing 'system-upgrade/server-plan': handler system-upgrade-controller: Get \"https://update.k3s.io/v1-release/channels/stable\": x509: certificate signed by unknown authority, requeuing"
time="2022-08-28T03:26:09Z" level=error msg="error syncing 'system-upgrade/agent-plan': handler system-upgrade-controller: Get \"https://update.k3s.io/v1-release/channels/stable\": x509: certificate signed by unknown authority, requeuing"
time="2022-08-28T03:26:12Z" level=error msg="error syncing 'system-upgrade/agent-plan': handler system-upgrade-controller: Get \"https://update.k3s.io/v1-release/channels/stable\": x509: certificate signed by unknown authority, requeuing"
time="2022-08-28T03:26:12Z" level=error msg="error syncing 'system-upgrade/server-plan': handler system-upgrade-controller: Get \"https://update.k3s.io/v1-release/channels/stable\": x509: certificate signed by unknown authority, requeuing"
time="2022-08-28T03:26:18Z" level=error msg="error syncing 'system-upgrade/server-plan': handler system-upgrade-controller: Get \"https://update.k3s.io/v1-release/channels/stable\": x509: certificate signed by unknown authority, requeuing"
time="2022-08-28T03:26:18Z" level=error msg="error syncing 'system-upgrade/agent-plan': handler system-upgrade-controller: Get \"https://update.k3s.io/v1-release/channels/stable\": x509: certificate signed by unknown authority, requeuing"
time="2022-08-28T03:26:29Z" level=error msg="error syncing 'system-upgrade/server-plan': handler system-upgrade-controller: Get \"https://update.k3s.io/v1-release/channels/stable\": x509: certificate signed by unknown authority, requeuing"
time="2022-08-28T03:26:29Z" level=error msg="error syncing 'system-upgrade/agent-plan': handler system-upgrade-controller: Get \"https://update.k3s.io/v1-release/channels/stable\": x509: certificate signed by unknown authority, requeuing"
time="2022-08-28T03:26:50Z" level=error msg="error syncing 'system-upgrade/agent-plan': handler system-upgrade-controller: Get \"https://update.k3s.io/v1-release/channels/stable\": x509: certificate signed by unknown authority, requeuing"
time="2022-08-28T03:26:50Z" level=error msg="error syncing 'system-upgrade/server-plan': handler system-upgrade-controller: Get \"https://update.k3s.io/v1-release/channels/stable\": x509: certificate signed by unknown authority, requeuing"
time="2022-08-28T03:27:21Z" level=error msg="error syncing 'system-upgrade/agent-plan': handler system-upgrade-controller: Get \"https://update.k3s.io/v1-release/channels/stable\": x509: certificate signed by unknown authority, requeuing"
time="2022-08-28T03:27:21Z" level=error msg="error syncing 'system-upgrade/server-plan': handler system-upgrade-controller: Get \"https://update.k3s.io/v1-release/channels/stable\": x509: certificate signed by unknown authority, requeuing"
time="2022-08-28T03:27:51Z" level=error msg="error syncing 'system-upgrade/server-plan': handler system-upgrade-controller: Get \"https://update.k3s.io/v1-release/channels/stable\": x509: certificate signed by unknown authority, requeuing"
time="2022-08-28T03:27:51Z" level=error msg="error syncing 'system-upgrade/agent-plan': handler system-upgrade-controller: Get \"https://update.k3s.io/v1-release/channels/stable\": x509: certificate signed by unknown authority, requeuing"
time="2022-08-28T03:28:22Z" level=error msg="error syncing 'system-upgrade/agent-plan': handler system-upgrade-controller: Get \"https://update.k3s.io/v1-release/channels/stable\": x509: certificate signed by unknown authority, requeuing"
time="2022-08-28T03:28:22Z" level=error msg="error syncing 'system-upgrade/server-plan': handler system-upgrade-controller: Get \"https://update.k3s.io/v1-release/channels/stable\": x509: certificate signed by unknown authority, requeuing"
time="2022-08-28T03:28:52Z" level=error msg="error syncing 'system-upgrade/agent-plan': handler system-upgrade-controller: Get \"https://update.k3s.io/v1-release/channels/stable\": x509: certificate signed by unknown authority, requeuing"
time="2022-08-28T03:28:52Z" level=error msg="error syncing 'system-upgrade/server-plan': handler system-upgrade-controller: Get \"https://update.k3s.io/v1-release/channels/stable\": x509: certificate signed by unknown authority, requeuing"
time="2022-08-28T03:29:23Z" level=error msg="error syncing 'system-upgrade/server-plan': handler system-upgrade-controller: Get \"https://update.k3s.io/v1-release/channels/stable\": x509: certificate signed by unknown authority, requeuing"
time="2022-08-28T03:29:23Z" level=error msg="error syncing 'system-upgrade/agent-plan': handler system-upgrade-controller: Get \"https://update.k3s.io/v1-release/channels/stable\": x509: certificate signed by unknown authority, requeuing"

可参考:https://github.com/rancher/system-upgrade-controller/issues/105