The error indicates that the certificate isn't valid for kubernetes.default.svc. We've been recommended by kubernetes maintainers that this is the canonical address for pods contacting the api server from inside a cluster.
There are a few ways to fix/workaround this.
First option (best option) is to recreate your api server certificate with the addition of kubernetes.default.svc as a valid hostname. How you do that depends on how you've deployed kubernetes. If you need help with that, let us know how you deployed it & we can try to help with that if we've seen it before.
Second option, which I would only use for development environments personally, is to disable certificate validation. Note that this opens you up for man in the middle attacks so be careful where you use it (& don't use it if at all possible!). To disable certificate validation, set the environment variable KUBERNETES_TRUST_CERTIFICATES to true in the pod/shell you're running your app.
--
You received this message because you are subscribed to the Google Groups "fabric8" group.
To unsubscribe from this group and stop receiving emails from it, send an email to fabric8+u...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.