kubectl commands fail due to tls certificate

Products

• Tanzu Kubernetes Runtime

Issue/Introduction

When logged into kubectl and context set to a guest cluster, kubectl commands fail with following error:

couldn't get current server API group list: Get "https://<IP-addr>:6443/api?timeout=32s": tls: failed to verify certificate: x509: certificate has expired or is not yet valid: current time <timestamp> is after <timestamp>

Cause

Cause is due to expired guest cluster certificates. They will need to be rotated.

Resolution

Follow resolution steps in this KB article.