Question 103690 in Azure Question posted in
The official documentation to get you started can be found here.

Azure CLI – AKS Communication Issue

i have problem in executing Kubectl commands, its errors out with 502 certificate error

Unable to connect to the server: x509: certificate signed by unknown authority

enter image description here

I can able to login to az login after that I’m connecting with my AKS cluster by using below command

az aks get-credentials --resource-group sitecore10.x-dev-k8s --name sitecore102-Dev-AKS-v1 --overwrite-existingenter code here

After that executing Kubectl get pods or Kubectl get services but it doesn’t work

enter image description here

already tried adding environment variables
enter image description here

Opened .kube file and opened the same Url in browser , displayed the below error

enter image description here

Tags:

2

Answers


  1. Chosen as BEST ANSWER
    0

    Resolved I got a chance to resolve this issue. The actual issue is AKS URL (https://AKSInstance.hcp.westus.azmk8s.io:443) is blocked by Company Internet Monitoring Software (Netskope). i raised a support ticket to whitelist the URL https://*.azmk8s.io

    How to check the issue : C:Users[YourUserName].kube open config file to identify the AKS URL, try opening the URL directly in the browser, if your getting 401 authentication issue then your good, otherwise if your getting error message related to certificate then it should be your Internet Monitoring software is blocking the AKS URL calls.


  2. 0

    I tried to reproduce the same in my environment to connect the AKS cluster from a windows machine:

    I have created AKS cluster, like below.

    Go to Azure Portal > Kubernetes Services > Create.

    enter image description here

    Download Kubectl tool here and install the same on a windows machine, like below.

    open powershell in CMD and navigate to download folder and run kubectl.exe , like below.

    enter image description here

    connect your cluster using cloud shell to download .kube.config file. like below.

    enter image description here

    once connected to the cluster, download the config file to the Local windows machine.

    enter image description here

    Create a folder with .kube name in your username folder and place the downloaded config file in the same folder.

    Path  C:Usersyourusername

    enter image description here

    Now run kubectl cmd to get the AKS cluster details from the windows machine, like below.

    enter image description here

    Reference: kubectl unable to connect to server: x509: certificate signed by unknown authority by bherto39.

    Login or Signup to reply.
Please signup or login to give your own answer.

Back To Top
Search