Kubectl with TLS inspection

General Discussions
,
1

Hi
I am running kubectl commands from powershell and we also use a network tool for TLS inspection. TLS inspection application uses its own certificate to perform its functions. This certificate is also installed in the Windows Trusted Root Certificate Authorities as well. Still kubectl shows the following error:
“Unable to connect to the server: tls: failed to verify certificate: x509: certificate signed by unknown authority”

Now I know I can add trusted certificates to a specific cluster in the kubectl config file but I have to do that for each cluster I add which is not ideal. Is there a solution where I can add this certificate globally or get kubectl to recognise Windows Trusted Root Certificate Authorities so it doesn’t show this above error.

I DON’T want to skip TLS inspection with the --insecure-skip-tls-verify option.

I am running this through Docker or any other virtualized container. The operating system is Windows 11 Pro.

2

I think you need to inject the root certificate into the docker image in that case.