Skip to content

tkn throwing x509: certificate signed by unknown authority errors #2773

@john2exonets

Description

@john2exonets

Versions and Operating System

  • Kubernetes version:

    Output of kubectl version:

Ubuntu Microk8s
Client Version: v1.32.13
Kustomize Version: v5.5.0
Server Version: v1.32.13
  • Tekton Pipeline version:

    Output of tkn version or kubectl get pods -n tekton-pipelines -l app=tekton-pipelines-controller -o=jsonpath='{.items[0].metadata.labels.version}'

 v1.6.0
  • Operating System:
Ubuntu v24.04.3 LTS

Expected Behavior

Running the 'tkn' command should work.

Actual Behavior

$ tkn pipeline list
Failed to list objects from default namespace 
Error: failed to list Pipelines from namespace default: Get "https://10.67.31.190:16443/api": tls: failed to verify certificate: x509: certificate signed by unknown authority (possibly because of "crypto/rsa: verification error" while trying to verify candidate authority certificate "10.152.183.1")

The 31.190 is the physical interface address and is what is defined in the ~/.kube/cofnig file. the 183.1 is the K8s Service ClusterIP.

Steps to Reproduce the Problem

  1. Install tkn
  2. run any tkn command that queries Tekton.

Additional Info

I have tried adding the ca.crt from the K8s cluster to my node's ca certs directory -- no go. I tried telling k8s to ignore tls verfication -- still no go.

Metadata

Metadata

Assignees

No one assigned

    Labels

    kind/bugCategorizes issue or PR as related to a bug.

    Type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions