tls: failed to verify certificate: x509: certificate signed by unknown authority

[devopsmariocom]

On Azure AKS version v1.31.2 I'm getting following error:

{"time":"2025-03-11T08:39:38.380235681Z","level":"INFO","msg":"scraping metrics from nodes","node_count":2}
{"time":"2025-03-11T08:39:38.390197834Z","level":"ERROR","msg":"failed to scrape node","err":"Get "https://aks-fixed-19386576-vmss00000y:10250/metrics/resource\": tls: failed to verify certificate: x509: certificate signed by unknown authority","node":"aks-fixed-19386576-vmss00000y"}
{"time":"2025-03-11T08:39:38.408393039Z","level":"ERROR","msg":"failed to scrape node","err":"Get "https://aks-fixed-19386576-vmss00000z:10250/metrics/resource\": tls: failed to verify certificate: x509: certificate signed by unknown authority","node":"aks-fixed-19386576-vmss00000z"}
{"time":"2025-03-11T08:39:38.408428005Z","level":"INFO","msg":"finished scraping metrics from nodes","success":0,"failure":2,"duration_ms":28}

[devopsmariocom]

Resolved by setting agent.disableKubeTLSverify=true which is mentioned on second page https://docs.vantage.sh/kubernetes_agent/#install-vantage-kubernetes-agent

I would suggest to change paragraph https://console.vantage.sh/settings/kubernetes?connect=true

Next, install the Helm Chart within your cluster. For clusters over 10-20 nodes, refer to the installation documentation for additional agent resource request configuration.

to

Next, install the Helm Chart within your cluster. For clusters over 10-20 nodes and Azure AKS clusters, refer to the installation documentation for additional agent resource request configuration.