I'm having trouble using kubectl from my Windows workstation with AWS Elastic Kubernetes Service (EKS). I keep getting an error that says, 'tls: failed to parse certificate from server: x509: certificate contains duplicate extensions.' While I can access the cluster via CloudShell without any issue, my local kubectl can't process the server certificate, which is causing problems for me when trying to manage the cluster from my laptop.
4 Answers
Honestly, Windows is not really the best choice for development work like this. Have you thought about switching to Mac or Linux? They're generally more seamless for this kind of task.
It sounds like your certificate could be malformed or there's a proxy interfering. You could check if the AWS-managed EKS API server is generating the cert correctly. If it’s a proxy issue, you might need to talk to your corporate IT about securing your connections.
I had a similar issue, but disabling Kaspersky on my computer did the trick! Everything's working smoothly now. <3 <3
If you're the cluster administrator, make sure to run the aws eks commands to set up kubectl correctly. You might need to configure some settings to get it working right.
Just a heads-up, it might be better to remove Kaspersky completely. You really wouldn’t want any potential security issues with your traffic.