Error "certificate signed by unknown authority" after switching GCP project

3/16/2016

After switching gcloud projects using ...

gcloud init

... and then try to do some kubectl command, like this for instance:

kubectl get rc

... I get this error:

error: couldn't read version from server: Get
https://130.211.59.254/api: x509: certificate signed by unknown authority

Why is this and how can I solve it?

-- Mattias Petter Johansson
google-cloud-platform
google-kubernetes-engine
kubernetes

3 Answers

6/6/2019

step 1: Remove .kube/config file

step 2: gcloud container clusters get-credentials YOURCLUSTERHERE

Still, if you facing issue, then disconnect with your current orgnization network and try with mobile hotspot or your wifi.

-- gautam
Source: StackOverflow

3/16/2016

This is because the keys to your old cluster is cached. I'm not sure why they are not updated by the gcloud init command (that's what one would intuitively expect, or at least some kinder error message from kubectl)

You solve it by simply getting the credentials of the cluster in the new configuration:

gcloud container clusters get-credentials YOURCLUSTERHERE --zone YOURCLUSTERZONEHERE
-- Mattias Petter Johansson
Source: StackOverflow

9/17/2017

This can be resolved by fetching the credential

gcloud container clusters get-credentials   < container-cluster >    --zone < zone >  --project   < project name >

Or

login to GCP

GCP -> container engine -> container clusters -> connect to cluster

Refer this docs for further information

https://cloud.google.com/sdk/gcloud/reference/container/clusters/get-credentials

-- RahulKrishnan R A
Source: StackOverflow