Minikube - Kubernetes cluster unreachable: Get "https://192.168.49.2:8443/version?timeout=32s": x509: certificate signed by unknown authority

Meshery
1

I keep forgetting what the solution to this error message is, related messages in Slack are long gone, and I’m not able to find it in the Meshery documentation either. So, to my future self (and others encountering the same error):

  • run kubectl config view --minify --flatten > config_minikube.yaml
  • upload this file in the Meshery UI to (re-)configure cluster access
  • also there is an apparently unused function func GenerateConfigMinikube in mesheryctl/pkg/utils/scripts.go that implements this - should it be removed or used?

Running minikube on Ubuntu, Meshery server and Istio adapter from my IDE, UI with make run-ui-dev.

2 Likes
2

Hey @michael we have this working out of the box in meshery server from a few releases now. Can you test a latest version of meshery server?

PS: You do have to connect the networks as mentioned here: Minikube | Meshery

3

Hey @utkarsh-pro thanks for the feedback. I’m using the latest version (should have mentioned that, sorry), i.e. the master branch for both Meshery server and the Istio adapter, running in debug mode from my IDE (IntelliJ).

4

Actually, @utkarsh-pro, it was the Istio adapter that emitted the error:

ERRO[2021-09-13T19:09:18+02:00] Kubernetes cluster unreachable: Get "https://192.168.49.2:8443/version?timeout=32s": x509: certificate signed by unknown authority app=istio-adaptor code=1025 probable-cause= severity=2 short-description="Error occured while applying Helm Chart" suggested-remediation=

The error will also occur if an adapter API is used directly (development, end-to-end tests) and the kubeconfig sent in is not kubectl config view --minify --flatten'ed.