<p>I have minikube running and I am trying to list the keys on my ETCD.  </p>

<p>I downloaded the latest <code>etcdctl</code> client from github:<br>
<a href="https://github.com/etcd-io/etcd/releases/download/v3.3.18/etcd-v3.3.18-linux-amd64.tar.gz" rel="nofollow noreferrer">https://github.com/etcd-io/etcd/releases/download/v3.3.18/etcd-v3.3.18-linux-amd64.tar.gz</a>  </p>

<p>I tried to run it with the certificates from <code>/home/myuser/.minikube/certs</code>:  </p>

<pre><code>./etcdctl --ca-file /home/myuser/.minikube/certs/ca.pem 
          --key-file /home/myuser/.minikube/certs/key.pem 
          --cert-file /home/myuser/.minikube/certs/cert.pem  
          --endpoints=https://10.240.0.23:2379 get / 
</code></pre>

<p>I received an error:  </p>

<blockquote>
  <p>Error:  client: etcd cluster is unavailable or misconfigured; error
  #0: x509: certificate signed by unknown authority  </p>
  
  <p>error #0: x509: certificate signed by unknown authority</p>
</blockquote>

<p>Did I used the correct certificates ?  </p>

<p>I tried different certificates like that:  </p>

<pre><code>./etcdctl --ca-file /var/lib/minikube/certs/ca.crt 
          --key-file /var/lib/minikube/certs/apiserver-etcd-client.key 
          --cert-file /var/lib/minikube/certs/apiserver-etcd-client.crt 
          --endpoints=https://10.240.0.23:2379 get /   
</code></pre>

<p>I received the same error from before.  </p>

<p>Any idea what is the problem ?  </p>

<p>For minikube the correct path for etcd certificates is: /var/lib/minikube/certs/etcd/ so the command will be like that:</p>
<pre><code># kubectl -n kube-system exec -it etcd-minikube -- sh -c &quot;ETCDCTL_API=3 ETCDCTL_CACERT=/var/lib/minikube/certs/etcd/ca.crt ETCDCTL_CERT=/var/lib/minikube/certs/etcd/server.crt ETCDCTL_KEY=/var/lib/minikube/certs/etcd/server.key etcdctl endpoint health&quot;
</code></pre>
