certificate signed by unknown authority error
Kyrremann opened this issue · 4 comments
I'm having certificate problems using this tool. Guessing it is because it's not loading local ca-bundle or something like that?
$ k tree app pt-sak-consumer
Error: failed to fetch api groups from kubernetes: Get https://apiserver.xxx.no:14125/api?timeout=32s: x509: certificate signed by unknown authority
We use Kubernetes client-go, so I suspect it’s a problem with that. Does kubectl work?
Most clusters that have self signed certs gave their CA data in KUBECONFIG file (either hardcoded as a file ref).
kubectl works, had problems with helm 2, but helm 3 works.
No CA-data in the kubeconfig file, which I guess is the reason why tree doesn't work. It's a corporate computer.
I’ll keep this open, but my suspicion is that this is something client-go needs to fix since they set the tls.Config on the REST API client.
It may also be a problem with my computer/certificates, a colleague of mine tried, and it worked.