Commit 5748aad8 authored by Ben Ewen's avatar Ben Ewen Committed by Mike Jang

API URL must exist in the SANs for the Kubernetes certificate

parent de0fce61
...@@ -387,3 +387,13 @@ If you encounter this error while adding a Kubernetes cluster, ensure you're ...@@ -387,3 +387,13 @@ If you encounter this error while adding a Kubernetes cluster, ensure you're
properly pasting the service token. Some shells may add a line break to the properly pasting the service token. Some shells may add a line break to the
service token, making it invalid. Ensure that there are no line breaks by service token, making it invalid. Ensure that there are no line breaks by
pasting your token into an editor and removing any additional spaces. pasting your token into an editor and removing any additional spaces.
You may also experience this error if your certificate is not valid. To check that your certificate's
subject alternative names contain the correct domain for your cluster's API, run this:
```shell
echo | openssl s_client -showcerts -connect kubernetes.example.com:443 2>/dev/null |
openssl x509 -inform pem -noout -text
```
Note that the `-connect` argument expects a `host:port` combination. For example, `https://kubernetes.example.com` would be `kubernetes.example.com:443`.
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment