{"record":{"id":"989d5e493498ff77","repo":"dapr/dapr","slug":"error-parsing-allowedclockskew-duration-w","errorCode":null,"errorMessage":"error parsing AllowedClockSkew duration: %w","messagePattern":"error parsing AllowedClockSkew duration: %w","errorType":"validation","errorClass":null,"httpStatus":null,"severity":"error","filePath":"pkg/sentry/config/config.go","lineNumber":207,"sourceCode":"\t}\n\treturn defaultConfig, nil\n}\n\nfunc parseConfiguration(conf Config, daprConfig *daprGlobalConfig.Configuration) (Config, error) {\n\tmtlsSpec := daprConfig.Spec.MTLSSpec\n\tif mtlsSpec != nil && mtlsSpec.WorkloadCertTTL != \"\" {\n\t\td, err := time.ParseDuration(daprConfig.Spec.MTLSSpec.WorkloadCertTTL)\n\t\tif err != nil {\n\t\t\treturn conf, fmt.Errorf(\"error parsing WorkloadCertTTL duration: %w\", err)\n\t\t}\n\n\t\tconf.WorkloadCertTTL = d\n\t}\n\n\tif mtlsSpec != nil && mtlsSpec.AllowedClockSkew != \"\" {\n\t\td, err := time.ParseDuration(mtlsSpec.AllowedClockSkew)\n\t\tif err != nil {\n\t\t\treturn conf, fmt.Errorf(\"error parsing AllowedClockSkew duration: %w\", err)\n\t\t}\n\n\t\tconf.AllowedClockSkew = d\n\t}\n\n\tif daprConfig.Spec.MTLSSpec != nil && len(daprConfig.Spec.MTLSSpec.ControlPlaneTrustDomain) > 0 {\n\t\tconf.TrustDomain = daprConfig.Spec.MTLSSpec.ControlPlaneTrustDomain\n\t}\n\n\tdaprConfig.SetDefaultFeatures()\n\tconf.Features = daprConfig.Spec.Features\n\n\t// Get token validators\n\t// In Kubernetes mode, we always allow the built-in \"kubernetes\" validator\n\t// In self-hosted mode, the built-in \"insecure\" validator is enabled only if no other validator is configured\n\tconf.Validators = map[sentryv1pb.SignCertificateRequest_TokenValidator]map[string]string{}\n\tif IsKubernetesHosted(conf.Mode) {\n\t\tconf.DefaultValidator = sentryv1pb.SignCertificateRequest_KUBERNETES","sourceCodeStart":189,"sourceCodeEnd":225,"githubUrl":"https://github.com/dapr/dapr/blob/74ad41702745709bb15fe2114ff693b8c59bc3cc/pkg/sentry/config/config.go#L189-L225","documentation":"Error \"error parsing AllowedClockSkew duration: %w\" thrown in dapr/dapr.","triggerScenarios":"Thrown at pkg/sentry/config/config.go:207 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":[],"exampleFix":null,"handlingStrategy":null,"validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"74ad41702745709bb15fe2114ff693b8c59bc3cc","analyzedAt":"2026-08-16T04:22:26.543Z","schemaVersion":2},"datasetVersion":"2026-08-16T08:17:34.114Z"}