<p>I have deployed a Kubernetes cluster with 1 control plane and 2 worker nodes using Kubespray. Now, I am trying to add another worker node. I have included the IP of the virtual machine to be added as worker node in <code>inventory/mycluster/hosts.ini</code> file and I ran <code>ansible-playbook -i inventory/mycluster/hosts.ini scale.yml --flush-cache</code></p>

<p>I am getting following error:</p>

<pre><code>failed: [kubespray-master-0] (item=ca.pem) =&gt; {"changed": false, "item": "ca.pem", "msg": "Permission denied"}
failed: [kubespray-master-0] (item=node-kubespray-master-0-key.pem) =&gt; {"changed": false, "item": "node-kubespray-master-0-key.pem", "msg": "Permission denied"}
</code></pre>

<p><code>kubespray-master-0</code> is my k8s cluster master node.</p>

<p>Thanks in advance.</p>

<p>As the error message suggests you are being denied permission to access the certificates Kubespray needs to scale the cluster, specifically it needs the Certificate Authority (CA) to generate a certificate for the new node.</p>

<p>Ensure that you have the correct file permissions to read the certificates for the CA and for the control plane node (<code>ca.pem</code> and <code>node-kubespray-master-0-key.pem</code>) and that you have correctly configured your <code>SSLDIR</code> variable to the path storing your cluster's certificates.</p>
