canot get a working certificate on kubernetes

5/3/2020

Hi i'm new on kubernetes and i'm trying to get a docker registry working on a kubernetes cluster.

I created a cluster on 3 nodes with vagrant in my laptop and kubespray. Then followed this tutorial :

https://www.civo.com/learn/set-up-a-private-docker-registry-with-tls-on-kubernetes

My first error at the end was that my certificate x509 was valid for "ingress.local" and not myDomainName.com in my ingress.yaml file. So i tested to reinstall with "- host: ingress.local" instead of "- host: myDomainName.com" in the ingress.yaml file.

But now i'm getting :

Error response from daemon: Get https://ingress.local/v2/: x509: certificate signed by unknown authority

I do not have a domain name so to test i added this mapping on my hosts file :

192.168.50.11 ingress.local

Where 192.168.50.11 is a node ip

and finally when i run

kubectl get cert -n default i'm gettind No resources found.

I really don't know where to start to investigate

Thanks for any help

-- jio
certificate
docker-registry
kubernetes

1 Answer

5/3/2020

x509: certificate signed by unknown authority means the certificate authority which signed is not known. Letsencrypt needs a valid registered domain because it will validate the domain ownership and then issue the certificate valid for that domain only. Since you don't have a valid registered domain this is not working.

-- Arghya Sadhu
Source: StackOverflow