Certificate signed by unknown authority calling api-server from within cluster

[mfzl]

I'm trying to setup Knative with k3d but pods fail to start because it fails the call to api-server to retrieve configmaps with an SSL error.

x509: certificate signed by unknown authority

Is there something special that needs to be done for containers to trust CA of api-server?

[iwilltry42]

Hi @mfzl , thanks for starting this discussion!
Though I think this is rather an issue related to Knative and K3s directly, I can try to help you.
Can you maybe share more of the Knative setup/config and the full logs you're seeing there?

[mfzl]

I completely forgot I opened this discussion. The problem went away after I rebooted the system after an update. So it might have sufficed to restart docker maybe?

If you're curious about what I was trying to setup:

https://knative.dev/development/install/eventing/install-eventing-with-yaml/#install-knative-eventing

They were failing to start while trying to retrieve the configmap with the aforementioned error. I don't remember seeing any other log entries.

Thanks @iwilltry42