Hey there, anyone recently experiencing the issue of "update metadata: tuf: failed to decode root.json: expired at 2024-10-06 174749 +0000 UTC"? This error causing all of my agent fail to start and even unable to generate a new agent with fleetctl, when executing "fleetctl package" same error will pop-up and terminate the process

2024-10-07T14:24:09+08:00 INF found enroll secret in keystore: Credential Manager
2024-10-07T14:24:09+08:00 INF update metadata. using saved metadata error="update metadata: tuf: failed to decode root.json: expired at 2024-10-06 17:47:49 +0000 UTC"
2024-10-07T14:24:09+08:00 ERR run orbit failed error="target orbit lookup: lookup orbit: expired at 2024-10-06 17:47:49 +0000 UTC"
2024-10-07T14:24:10+08:00 INF found enroll secret in keystore: Credential Manager
2024-10-07T14:24:11+08:00 INF update metadata. using saved metadata error="update metadata: tuf: failed to decode root.json: expired at 2024-10-06 17:47:49 +0000 UTC"
2024-10-07T14:24:11+08:00 ERR run orbit failed error="target orbit lookup: lookup orbit: expired at 2024-10-06 17:47:49 +0000 UTC"
2024-10-07T14:24:12+08:00 INF found enroll secret in keystore: Credential Manager
2024-10-07T14:24:12+08:00 INF update metadata. using saved metadata error="update metadata: tuf: failed to decode root.json: expired at 2024-10-06 17:47:49 +0000 UTC"
2024-10-07T14:24:12+08:00 ERR run orbit failed error="target orbit lookup: lookup orbit: expired at 2024-10-06 17:47:49 +0000 UTC"

Same issue here

My guess is somehow the root.json is expired, and orbit / fleetctl will raise error whenever this root.json have any issue.

yeah, that's what it looks like

good to hear this

Thanks @Jacob Burley ! @Alan Chu we will post an update here upon resolution

same issue here, commenting to follow thread

Same here, it looks like the default TUF root certificate has expired https://github.com/fleetdm/fleet/blob/main/orbit/pkg/update/update.go#L37C1-L38C1 and https://tuf.fleetctl.com/root.json

Same issue for me. Waiting for a fix

Hi folks! We are working to fix this ASAP. (#22687)

Doc with live status: https://docs.google.com/document/d/17P-G-abUmhn2OMZP2fje_jKvzv4hK7ynlNjn9OBZ748/edit

hey folks - providing another quick update here that we're still actively working on this as our highest priority and hope to have a resolution shortly.