Hi all we recently rotated our AKS certificate and now can n

Question

Hi all we recently rotated our AKS certificate and now can no longer access kubernetes with the pulumi k8provider The certificate kubeconfig works with lens and our deployment agents in DevOps pipelines Any ideas on what the issue is

victorious-exabyte-70545 · Answer

kubernetes apps v1 Deployment default chart error configured Kubernetes cluster is unreachable unable to load schema information from the API server Get <https d hcp westus2 azmk8s io 443 openapi v2 timeout=32s|https hcp westus2 azmk8s io 443 openapi v2 timeout=32s> x509 certificate signed by unknown authority possibly because of crypto rsa verification error while trying to verify candidate authority certificate ca

victorious-exabyte-70545 · Answer

Again this started after a kube cert rotation When I print the kubeconfig it is correct

victorious-exabyte-70545 · Answer

```kubeconfig = creds kubeconfigs 0 value apply lambda enc base64 b64decode enc decode k8s provider = k8s Provider f stack name k8s provider kubeconfig=kubeconfig ```

victorious-exabyte-70545 · Answer

Then

victorious-exabyte-70545 · Answer

```pulumi export kubeconfig kubeconfig ```

victorious-exabyte-70545 · Answer

kubeconfig matches what lens is using and lens works

billowy-army-68599 · Answer

< victorious exabyte 70545> what s in your state `pulumi state export` i bet the kubeconfig is still stored in state with the wrong cert

victorious-exabyte-70545 · Answer

That is probably it Do I export update kubeconfig import

victorious-exabyte-70545 · Answer

Stack that is

billowy-army-68599 · Answer

You can do a refresh of the urn I m on mobile so can t share how to do that Expert and update would work too