Error saying Unable to connect to the server x509 certificate signed by unknown authority

Question

I am using kube-aws to v0.9.4-rc2

After successfully do kube-aws up --s3-uri s3://.., I tried to get the nodes with kubectl get nodes, and that's when I get this error:

$kubectl get nodes
Unable to connect to the server: x509: certificate signed by unknown authority (possibly because of "crypto/rsa: verification error" while trying to verify candidate authority certificate "kube-ca")

In the kubeconfig file, there is a line describing the certificate authority:

apiVersion: v1
kind: Config
clusters:
- cluster:
    certificate-authority: credentials/ca.pem

Where am I going wrong?

Answer 1

I think you're credentials were not generated correctly and so the apiserver certi was signed with a wrong ca cert. Delete the credentials directory, then destroy the cluster and bring it up. I think this should work.

Answer 2

Try this, it might help:

kops export kubecfg --name $CLUSTER_NAME

Answer 3

Make sure you execute these commands every time you recreate a cluster:

  mkdir -p $HOME/.kube
  sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config
  sudo chown $(id -u):$(id -g) $HOME/.kube/config

Answer 4

Append kubectl get all command with --insecure-skip-tls-verify=true

This did the trick for me! Not sure about the logic behind it though.

Answer 5

export KUBECONFIG=/etc/kubernetes/admin.conf

Comments

It works for me...Thanks

---

Hi, @Ranjit,

If the above-given answer has helped you to overcome your query then do UPVOTE the answer and post your tech queries with the Edureka community!!!

Happy Learning!!!