[GH-ISSUE #973] [Bug] 部署的是否证书验证失败 #665

New issue

Closed

opened 2026-03-03 01:05:05 +03:00 by kerem · 2 comments

kerem commented

2026-03-03 01:05:05 +03:00

Owner

Originally created by @hughcube on GitHub (Sep 22, 2025).
Original GitHub issue: https://github.com/certimate-go/certimate/issues/973

软件版本 / Release Version

v0.3.9

缺陷描述 / Description

failed to create k8s secret: Post "https://x.x.x.x:6443/api/v1/namespaces/xxxxx/secrets": tls: failed to verify certificate: x509: certificate is valid for 10.43.0.1, 127.0.0.1, 172.16.16.11, ::1, not x.x.x.x

复现步骤 / Steps to reproduce

日志 / Logs

# 请在此粘贴日志 / Paste logs here

其他 / Miscellaneous

No response

贡献 / Contribution

我乐意为此贡献 PR！ / I am interested in contributing a PR for this!

Originally created by @hughcube on GitHub (Sep 22, 2025). Original GitHub issue: https://github.com/certimate-go/certimate/issues/973 ### 软件版本 / Release Version v0.3.9 ### 缺陷描述 / Description failed to create k8s secret: Post "https://x.x.x.x:6443/api/v1/namespaces/xxxxx/secrets": tls: failed to verify certificate: x509: certificate is valid for 10.43.0.1, 127.0.0.1, 172.16.16.11, ::1, not x.x.x.x ### 复现步骤 / Steps to reproduce 1 ### 日志 / Logs <details> ```console # 请在此粘贴日志 / Paste logs here ``` </details> ### 其他 / Miscellaneous _No response_ ### 贡献 / Contribution - [ ] 我乐意为此贡献 PR！ / I am interested in contributing a PR for this!

kerem

2026-03-03 01:05:05 +03:00

closed this issue
added the
bug
label

kerem commented

2026-03-03 01:05:06 +03:00

Author

Owner

@hughcube commented on GitHub (Sep 22, 2025):

这个是kubeconf的问题, 大佬能否加一个开关, 跳过证书验证

@hughcube commented on GitHub (Sep 22, 2025): 这个是kubeconf的问题, 大佬能否加一个开关, 跳过证书验证

kerem commented

2026-03-03 01:05:06 +03:00

Author

Owner

@fudiwei commented on GitHub (Sep 23, 2025):

这个是kubeconf的问题, 大佬能否加一个开关, 跳过证书验证

kubeconfig 里你就可以配置忽略证书错误啊。

clusters:
- name: your-cluster
  cluster:
    server: https://your-server:6443
    insecure-skip-tls-verify: true # <- 这里

# 其余略

@fudiwei commented on GitHub (Sep 23, 2025): > 这个是kubeconf的问题, 大佬能否加一个开关, 跳过证书验证 kubeconfig 里你就可以配置忽略证书错误啊。 ```yaml clusters: - name: your-cluster cluster: server: https://your-server:6443 insecure-skip-tls-verify: true # <- 这里 # 其余略 ```

kerem referenced this issue

2026-03-03 01:07:15 +03:00

[PR #665] [MERGED] Support configuring dns propagation waiting time #1006