Error trying to connect: The certificate was not trusted

Question

Error trying to connect: The certificate was not trusted

low-on-mana opened this issue 5 years ago · comments

$  kubectl-view-allocations -g resource
[2019-12-18T17:03:06Z ERROR kubectl_view_allocations] failed
    cli: CliOpts { namespace: None, show_zero: false, resource_name: [], group_by: [resource] }
    error: ReqwestError: error sending request for url (https://***************/api/v1/nodes?): error trying to connect: The certificate was not trusted.

    Caused by:
        0: error sending request for url (https://***************/api/v1/nodes?): error trying to connect: The certificate was not trusted.
        1: error trying to connect: The certificate was not trusted.
        2: The certificate was not trusted.

Get pods is working with my kubeconfig though. Also noticed a typo in above error.

$ kubectl get pods
NAME                                                     READY   STATUS    RESTARTS   AGE
***************-586b47d996-58wmz                       1/1     Running   0          5h21m

David Bernard · Answer 1 · Thu Dec 19 2019 04:43:29 GMT+0800 (China Standard Time)

Sorry for the issue, it seems related to kube-rs/kube#89.

Can you share after some obfuscation what look like your $HOME/.kube/config (I mainly need the key to have an idea of what kind of config I should reproduce, to be able to fix) ?

Thanks for give a try and reporting the bug

low-on-mana · Answer 2 · Thu Dec 19 2019 13:59:10 GMT+0800 (China Standard Time)

apiVersion: v1
clusters:
- cluster:
    certificate-authority: /Users/anoop/.minikube/ca.crt
    server: https://192.168.64.2:8443
  name: minikube
- cluster:
    certificate-authority-data: ************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************
    server: https://************************.in
  name: ********************.in
- cluster:
    certificate-authority-data: ************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************
    server: https://**********************.in
  name: ******************.in
contexts:
- context:
    cluster: minikube
    user: minikube
  name: minikube
- context:
    cluster: ********************.in
    namespace: dev
    user: ********************.in
  name: non-prod
- context:
    cluster: ******************.in
    namespace: default
    user: ******************.in
  name: spike
current-context: non-prod
kind: Config
preferences: {}
users:
- name: minikube
  user:
    client-certificate: /Users/anoop/.minikube/client.crt
    client-key: /Users/anoop/.minikube/client.key
- name: ********************.in
  user:
    client-certificate-data: *******************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************=
    client-key-data: **************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************==
    password: ********************************
    username: *****
- name: **********************************
  user:
    password: ********************************
    username: *****
- name: ******************.in
  user:
    client-certificate-data: *******************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************=
    client-key-data: **************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************==
    password: ********************************
    username: admin
- name: ********************************
  user:
    password: ********************************
    username: *****

Had to * everything

David Bernard · Answer 3 · Thu Dec 19 2019 14:13:34 GMT+0800 (China Standard Time)

Do fou have thé errer with the 3 contexte ? Is the non minikube is gke, azure, eks,... ? Thanks. Le jeu. 19 déc. 2019 à 06:59, t0il3ts0ap <notifications@github.com> a écrit :

…

apiVersion: v1 clusters: - cluster: certificate-authority: /Users/anoop/.minikube/ca.crt server: https://192.168.64.2:8443 name: minikube - cluster: certificate-authority-data: ************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************ server: https://************************.in name: ********************.in - cluster: certificate-authority-data: ************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************ server: https://**********************.in name: ******************.in contexts: - context: cluster: minikube user: minikube name: minikube - context: cluster: ********************.in namespace: dev user: ********************.in name: non-prod - context: cluster: ******************.in namespace: default user: ******************.in name: spike current-context: non-prod kind: Config preferences: {} users: - name: minikube user: client-certificate: /Users/anoop/.minikube/client.crt client-key: /Users/anoop/.minikube/client.key - name: ********************.in user: client-certificate-data: *******************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************= client-key-data: **************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************== password: ******************************** username: ***** - name: ********************************** user: password: ******************************** username: ***** - name: ******************.in user: client-certificate-data: *******************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************= client-key-data: **************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************== password: ******************************** username: admin - name: ******************************** user: password: ******************************** username: ***** Had to * everything — You are receiving this because you were assigned. Reply to this email directly, view it on GitHub <#11?email_source=notifications&email_token=AAACTM5SD4ITLWMPQOLKWHTQZMES5A5CNFSM4J4OG3QKYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEHIQOUY#issuecomment-567347027>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAACTMZVPPLO4ZJZEPSKVSTQZMES5ANCNFSM4J4OG3QA> .

low-on-mana · Answer 4 · Thu Dec 19 2019 14:35:44 GMT+0800 (China Standard Time)

Non minikube is in aws. Yes I am having error with all except minikube.

David Bernard · Answer 5 · Fri Dec 20 2019 03:53:47 GMT+0800 (China Standard Time)

Are you on mac OSX Catalina ?

low-on-mana · Answer 6 · Sat Dec 21 2019 07:00:30 GMT+0800 (China Standard Time)

Are you on mac OSX Catalina ?

Yes @davidB

David Bernard · Answer 7 · Sun Dec 22 2019 22:49:04 GMT+0800 (China Standard Time)

Thanks for your help.

FYI I provide the result of my investigation in the ticket of kube-rs linked above, and will discuss the workaround on it.

David Bernard · Answer 8 · Sat Dec 28 2019 16:27:20 GMT+0800 (China Standard Time)

Can you try the version 0.6.1 (also available via krew) ?

low-on-mana · Answer 9 · Sat Dec 28 2019 17:57:41 GMT+0800 (China Standard Time)

v0.6.1 works with no errors.
I was unable to install it with cargo though.

    Replaced package `kubectl-view-allocations v0.6.0` with `kubectl-view-allocations v0.6.0` (executable `kubectl-view-allocations`)
error: could not find `v0.6.1` in registry `https://github.com/rust-lang/crates.io-index`
     Summary Successfully installed kubectl-view-allocations! Failed to install v0.6.1 (see error(s) above).

Had to install it with krew finally.

David Bernard · Answer 10 · Sat Dec 28 2019 18:04:48 GMT+0800 (China Standard Time)

Yes because I used I a forked unpublished version of kube-rs, this version is not published on crates.io. I'll release and publish the version when next version kube-rs is published, after release of reqwest 0.10.0 . Thanks for the feedback.

…

On Sat, Dec 28, 2019 at 10:57 AM t0il3ts0ap ***@***.***> wrote: v0.6.1 works with no errors. I was unable to install it with cargo though. Replaced package `kubectl-view-allocations v0.6.0` with `kubectl-view-allocations v0.6.0` (executable `kubectl-view-allocations`) error: could not find `v0.6.1` in registry `https://github.com/rust-lang/crates.io-index` <https://github.com/rust-lang/crates.io-index> Summary Successfully installed kubectl-view-allocations! Failed to install v0.6.1 (see error(s) above). Had to install it with krew finally. — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub <#11?email_source=notifications&email_token=AAACTM3FKILM33JT5NFQUBTQ24PJLA5CNFSM4J4OG3QKYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEHYGPAI#issuecomment-569403265>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAACTM6KYRAGZ2RW4SSLEHDQ24PJLANCNFSM4J4OG3QA> .