TremoloSecurity / OpenUnison

Unified Identity Management
Apache License 2.0
76 stars 9 forks source link

Kube Token no longer auto retrieving certs for oidc integrated clusters #888

Closed mlbiam closed 4 months ago

mlbiam commented 6 months ago

surfaced by https://github.com/OpenUnison/openunison-k8s/issues/109 when you get the following error:

Unable to connect to the server: tls: failed to verify certificate: x509: “kube-apiserver” certificate is not trusted

This started in 1.0.40. The workaround is to downgrade to 1.0.39 or add the base64 encoded certificate to your values.yaml:

trusted_certs:
- name: k8s-master
  pem_b64: base64 encoded certificate