New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Curl inside a pod: curl: (60) SSL certificate problem: unable to get local issuer certificate #12924
Comments
1- does not seem like u are inside minikube, are u using 3- can you please attach this file
|
@medyagh 1. I can curl fine when using I applied the following resource:
used bash: The fact that I can do the curl inside a similar container on another machine makes it look like a kubernetes/minikube problem.
|
I deleted the whole cluster and added it again... To my surprise, output is different this time:
After searching, I stumbled upon
This is consistent across kind clusters as well so might be kubernetes config issue. Can anyone point me in the right direction? |
Hi @rahulanand16nov, when you start a fresh minikube cluster (non-existing) There you can see the following certs commands are run:
So this should be handled on a fresh start, previously if you had a long running that was never deleted, the cert would never be renewed, but as of minikube v1.24.0 cert renewal will now run when running Does that answer your question? |
Hi @spowelljr , Thanks for the reply! I am already using v1.24.0 of minikube:
Even after deleting everything (did a complete reinstall of the OS as well), I have the following output:
|
@rahulanand16nov I wonder do u have a Crop Cert ? (are u using a corp laptop) have u tried copying your corp root cert into minikube? here are instructions |
@medyagh Yup, found Copied
deleted and started with Same issue :( |
The Kubernetes project currently lacks enough contributors to adequately respond to all issues and PRs. This bot triages issues and PRs according to the following rules:
You can:
Please send feedback to sig-contributor-experience at kubernetes/community. /lifecycle stale |
The Kubernetes project currently lacks enough active contributors to adequately respond to all issues and PRs. This bot triages issues and PRs according to the following rules:
You can:
Please send feedback to sig-contributor-experience at kubernetes/community. /lifecycle rotten |
The Kubernetes project currently lacks enough active contributors to adequately respond to all issues and PRs. This bot triages issues and PRs according to the following rules:
You can:
Please send feedback to sig-contributor-experience at kubernetes/community. /close |
@k8s-triage-robot: Closing this issue. In response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. |
Hello maintainers,
I was trying to learn Kubernetes and got stuck on an issue for hours that prevents making an HTTPS request from any container to outside.
Things I did:
Create minkube/kind cluster:
Installed Istio components
Tried to execute curl request from istiod component and I get:
I can curl fine from the outside.
The text was updated successfully, but these errors were encountered: