Hello,
I am trying to generate a certificate signing request but have encountered the following issues:
STEPS TAKEN TO REPRODUCE THE ISSUE
1 $ openssl genrsa -out krishna.key 2048
2 $ openssl req -new -key krishna.key -out krishna.csr -subj “//CN=krishna”
3 $ cat krishna.csr | base64 | tr -d “\n”
4A
…
#csr.yaml (File name only)
apiVersion: certificates.k8s.io/v1
kind: CertificateSigningRequest
metadata:
name: krishna
spec:
request: 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
signerName: kubernetes.io/kube-apiserver-client
expirationSeconds: 8640000 #four days
usages:
- client auth
…
4B $ kubectl apply -f csr.yaml
error: error validating “csr.yaml”: error validating data: failed to download openapi:
Get “https://127.0.0.1:53842/openapi/v2?timeout=32s”: dial tcp 127.0.0.1:53842:
connectex: No connection could be made because the target machine actively refused it.;
if you choose to ignore these errors, turn validation off with --validate=false
========================================================================
OTHER RELEVANT INFORMATION
1 Platforms: Git/VScode/Docker Desktop
2 Kubernetes version:
$ kubectl version
Client Version: v1.30.5
Kustomize Version: v5.0.4-0.20230601165947-6ce0bf390ce3
Unable to connect to the server: dial tcp 127.0.0.1:53842: connectex: No connection could be made because the target machine actively refused it.
3 Installation method: choco install kind
I really appreciate your assistance in advance
Best regards,
Stanley