Known errors and solutions

Unable to connect to the server: x509: certificate signed by unknown authority (possibly because of "crypto/rsa: verification error" while trying to verify candidate authority certificate "kubernetes")
This error happened after a "kubeadm reset" and "init". Any kubectl command returned this error because the /root/.kube/config was still using the old certificate.
To fix it, just copy the new config:
1
cp /etc/kubernetes/admin.conf /root/.kube/config
Copied!
Error execution phase kubelet-start: configmaps "kubelet-config-1.14" is forbidden: User "system:bootstrap:g651e8" cannot get resource "configmaps" in API group "" in the namespace "kube-system"
This error happens when trying to join a node and the it mismatches master's kubelet, kubeadm and kubectl version.
To fix it, install on the worker node the same master's versions.
To check master versions run:
1
kubelet --version
2
kubeadm version
3
kubectl version
4
dpkg --list |grep kubernetes-cni
Copied!
Make sure your worker node has the same versions available:
1
apt-cache policy kubelet
2
apt-cache policy kubeadm
3
apt-cache policy kubectl
4
apt-cache policy kubernetes-cni
Copied!
Install on the worker node the same versions, for example:
1
apt-get install \
2
  kubelet=1.13.4-00 \
3
  kubeadm=1.13.4-00 \
4
  kubectl=1.13.4-00 \
5
  kubernetes-cni=0.6.0-00
Copied!
​
​

Kubeadm - Previous

Multi master

Next - Kubernetes

Kubectl Cheat Sheet

Last modified 3yr ago

Copy link

Contents

Unable to connect to the server: x509: certificate signed by unknown authority (possibly because of "crypto/rsa: verification error" while trying to verify candidate authority certificate "kubernetes")

Error execution phase kubelet-start: configmaps "kubelet-config-1.14" is forbidden: User "system:bootstrap:g651e8" cannot get resource "configmaps" in API group "" in the namespace "kube-system"