Skip to content

Commit 0c4f9f4

Browse files
csvirimetacosm
andauthored
docs: faq for k3s-based Kubernetes security exception (#1596)
Co-authored-by: Chris Laprun <metacosm@users.noreply.github.com>
1 parent 77be8f5 commit 0c4f9f4

File tree

1 file changed

+22
-0
lines changed

1 file changed

+22
-0
lines changed

docs/documentation/faq.md

Lines changed: 22 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -72,3 +72,25 @@ is `true` (`false` by default). To disable, set it to `false` at [Operator-level
7272
```java
7373
ConfigurationServiceProvider.overrideCurrent(o -> o.checkingCRDAndValidateLocalModel(false));
7474
```
75+
76+
77+
### Q: How to fix `sun.security.provider.certpath.SunCertPathBuilderException` on Rancher Desktop and k3d/k3s Kubernetes
78+
79+
It's a common issue when using k3d and the fabric8 client tries to connect to the cluster an exception is thrown:
80+
81+
```
82+
Caused by: javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
83+
at java.base/sun.security.ssl.Alert.createSSLException(Alert.java:131)
84+
at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:352)
85+
at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:295)
86+
```
87+
88+
The cause is that fabric8 kubernetes client does not handle elliptical curve encryption by default. To fix this, add
89+
the following dependency on the classpath:
90+
91+
```xml
92+
<dependency>
93+
<groupId>org.bouncycastle</groupId>
94+
<artifactId>bcpkix-jdk15on</artifactId>
95+
</dependency>
96+
```

0 commit comments

Comments
 (0)