helm: docker-for-mac - cannot parse dnsName "kubernetes.default.svc." on helm init

❯ helm init Creating /Users/x/.helm Creating /Users/x/.helm/repository Creating /Users/x/.helm/repository/cache Creating /Users/x/.helm/repository/local Creating /Users/x/.helm/plugins Creating /Users/x/.helm/starters Creating /Users/x/.helm/cache/archive Creating /Users/x/.helm/repository/repositories.yaml Adding stable repo with URL: https://kubernetes-charts.storage.googleapis.com Adding local repo with URL: http://127.0.0.1:8879/charts $HELM_HOME has been configured at /Users/x/.helm. Error: error installing: Post https://localhost:6443/apis/extensions/v1beta1/namespaces/kube-system/deployments: tls: failed to parse certificate from server: x509: cannot parse dnsName “kubernetes.default.svc.”

Output of helm version: ❯ helm version Client: &version.Version{SemVer:“v2.8.2”, GitCommit:“a80231648a1473929271764b920a8e346f6de844”, GitTreeState:“clean”}

Output of kubectl version: ❯ kubectl version Client Version: version.Info{Major:“1”, Minor:“8”, GitVersion:“v1.8.6”, GitCommit:“6260bb08c46c31eea6cb538b34a9ceb3e406689c”, GitTreeState:“clean”, BuildDate:“2017-12-21T06:34:11Z”, GoVersion:“go1.8.3”, Compiler:“gc”, Platform:“darwin/amd64”} Server Version: version.Info{Major:“1”, Minor:“9”, GitVersion:“v1.9.6”, GitCommit:“9f8ebd171479bec0ada837d7ee641dec2f8c6dd1”, GitTreeState:“clean”, BuildDate:“2018-03-21T15:13:31Z”, GoVersion:“go1.9.3”, Compiler:“gc”, Platform:“linux/amd64”}

Cloud Provider/Platform (AKS, GKE, Minikube etc.): Docker-for-mac Version 18.04.0-ce-rc2-mac61 (23890)

Likely related to:

About this issue

  • Original URL
  • State: closed
  • Created 6 years ago
  • Reactions: 19
  • Comments: 20 (5 by maintainers)

Most upvoted comments

Downgrading to 18.03.0-ce-mac58 resolves the issue:

brew cask uninstall docker-edge
brew cask install https://raw.githubusercontent.com/caskroom/homebrew-versions/36c418b5e6fdcb823b8a06d698bbf6d7d4f38ee0/Casks/docker-edge.rb

The root cause seems to be a recent change to Go’'s SSL library and the way D4M sets the dnsName field in the x509 cert: https://github.com/golang/go/issues/23995

I’d love to get some word that this has been fixed or not. Every time I get pestered by a new Docker for Mac upgrade, from 18.03.0-ce-mac58, I check and every time it’s not fixed. Anyone else have any status on this?

The downgrade works for me as well. Not sure if it is a docker or helm issue. both? 😕