Score:0

Unable to connect to the server: x509: certificate signed by unknown authority

ru flag

I am trying to convert a single master setup to multi-master. Load balancer is configured to accept traffic at port 443 and one of its backend is the single master IP and its port 6443.

I used LOAD_BALANCER_IP:PORT in my kubeconfig but I encountered the x509 error. Why is this error showing, how to resolve this?

sudo kubeadm init --control-plane-endpoint companykube.com:443 --kubernetes-version v1.21.2 --pod-network-cidr 10.244.0.0/16 --cri-socket /run/containerd/containerd.sock  --upload-certs --apiserver-cert-extra-sans=companykube.com,singlemasterIp,2ndmasterIP,3rdmasterIP --apiserver-bind-port=443 
mario avatar
cm flag
How did you initialize your kubeadm cluster ? It would be good to know more details on how you exactly set it up. Did you follow any specific tutorial or documentation ?
ru flag
added more details
ru flag
added more details at https://github.com/kubernetes/kubernetes/issues/103680
Mikołaj Głodziak avatar
id flag
@letthefireflieslive, Is there any progress in this case?
ru flag
@MikołajGłodziak answered my question
Score:2
ru flag

This is simply a load balancer issue in my case. We have used nginx as load balancer and the traffic is not going through from front-end to the backend of the LB.

We have time constraint and go with the tested HAProxy config, works smoothly

mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.