<p>I've just installed a kubernetes testinstallation directly on my fedora laptop using <a href="https://github.com/GoogleCloudPlatform/kubernetes/blob/v0.18.2/docs/getting-started-guides/fedora/fedora_manual_config.md" rel="nofollow">this guide</a>.</p>

<p>After starting kube2sky I've noticed I can't connect to the kubernetes api since the certificates are required. kubernetes-ro is deprecated and no longer available on my machine, so I get the following errors:</p>

<p>E0627 15:58:07.145720       1 reflector.go:133] Failed to list *api.Service: Get <a href="https://10.254.0.1:443/api/v1beta3/services" rel="nofollow">https://10.254.0.1:443/api/v1beta3/services</a>: x509: failed to load system roots and no roots provided
E0627 15:58:07.146844       1 reflector.go:133] Failed to list *api.Endpoints: Get <a href="https://10.254.0.1:443/api/v1beta3/endpoints" rel="nofollow">https://10.254.0.1:443/api/v1beta3/endpoints</a>: x509: failed to load system roots and no roots provided</p>

<p>How can I setup the certificates?</p>

<p>This has been a common problem for folks that aren't running on setups that use salt to automatically configure system secrets on the master node (as GCE does). This has been fixed at head and should be fixed in the next release. </p>

<p>In the mean time, you can manually create a secret for the DNS service that contains a kubeconfig file for kube2sky to connect to the master. You can see how this is done on GCE by looking at the create-kubeconfig-secret function in <a href="https://github.com/GoogleCloudPlatform/kubernetes/blob/master/cluster/saltbase/salt/kube-addons/kube-addons.sh#L24" rel="nofollow">kube-addons.sh</a> (when called with the username "system:dns"). The name of the resulting secret should be token-system-dns. </p>
