tls: failed to verify certificate: x509: certificate signed by unknown authority (possibly because of "crypto/rsa: verification error" while trying to verify candidate authority certificate "kubernetes")

아래와 같은 에러가 나온다면

 

E0131 01:39:11.217309   49814 memcache.go:265] couldn't get current server API group list: Get "https://192.168.98.159:6443/api?timeout=32s": tls: failed to verify certificate: x509: certificate signed by unknown authority (possibly because of "crypto/rsa: verification error" while trying to verify candidate authority certificate "kubernetes")
E0131 01:39:11.220185   49814 memcache.go:265] couldn't get current server API group list: Get "https://192.168.98.159:6443/api?timeout=32s": tls: failed to verify certificate: x509: certificate signed by unknown authority (possibly because of "crypto/rsa: verification error" while trying to verify candidate authority certificate "kubernetes")
E0131 01:39:11.222927   49814 memcache.go:265] couldn't get current server API group list: Get "https://192.168.98.159:6443/api?timeout=32s": tls: failed to verify certificate: x509: certificate signed by unknown authority (possibly because of "crypto/rsa: verification error" while trying to verify candidate authority certificate "kubernetes")
E0131 01:39:11.225854   49814 memcache.go:265] couldn't get current server API group list: Get "https://192.168.98.159:6443/api?timeout=32s": tls: failed to verify certificate: x509: certificate signed by unknown authority (possibly because of "crypto/rsa: verification error" while trying to verify candidate authority certificate "kubernetes")
E0131 01:39:11.228570   49814 memcache.go:265] couldn't get current server API group list: Get "https://192.168.98.159:6443/api?timeout=32s": tls: failed to verify certificate: x509: certificate signed by unknown authority (possibly because of "crypto/rsa: verification error" while trying to verify candidate authority certificate "kubernetes")
Unable to connect to the server: tls: failed to verify certificate: x509: certificate signed by unknown authority (possibly because of "crypto/rsa: verification error" while trying to verify candidate authority certificate "kubernetes")

 

아래 명령어를 쓰자

 

unset KUBECONFIG
export KUBECONFIG=/etc/kubernetes/admin.conf
mkdir -p $HOME/.kube
sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config
sudo chown $(id -u):$(id -g) $HOME/.kube/config

 

---

(x509 인증서 오류)

이 에러는 Kubernetes API 서버의 TLS 인증서가 신뢰되지 않기 때문에 발생한다.
즉, 사내에서 운영하는 Kubernetes의 인증서가 공식적으로 서명되지 않았거나, 자체 서명된 인증서(Self-Signed Certificate)를 사용하고 있기 때문이다.