I am using WSL, and there
I am running Kubernetes cluster inside minikube which is running on docker. When I am trying to create a pod, it always shows below error –
Failed to pull image "<image>": Error response from daemon: Get "https://registry-1.docker.io/v2/": tls: failed to verify certificate: x509: certificate signed by unknown authority
Though, When I am directly pulling images using docker command, it is working fine.
2
It is related to the root certificates, There may be an issue with the Zscaler policy applied. If you are using a Linux machine run the below command to list the root certificates currently installed on your machine.
sudo update-ca-certificates –fresh (chances are you won’t see the one for Zscaler).
Download Zscaler’s root cert in der format and convert it to pem (but make sure the extension is .crt. Otherwise it won’t work)
Copy the crt file to /usr/local/share/ca-certificates
Once again run this command sudo update-ca-certificates –fresh
It will read the crt file and add it to the available root cert store on your machine, try docker pull again.
If all of your ca certificates were missing from /usr/share/ca-certificates/*
re-install the package and update-ca-certificates -f, do apt-get install –reinstall ca-certificates.
1