<p>I follow mainly the following <a href="https://medium.com/slalom-build/how-to-build-a-secure-by-default-kubernetes-cluster-with-a-basic-ci-cd-pipeline-on-aws-ebfe0da1c7c9" rel="nofollow noreferrer">article</a>,  at the end I have the following issue while trying to deploy new objects to the cluster </p>

<blockquote>
  <p>error: unable to recognize "./[different files].yaml": Get
  <a href="https://api.[mycluster]/api?timeout=32s" rel="nofollow noreferrer">https://api.[mycluster]/api?timeout=32s</a>: x509: certificate
  signed by unknown authority</p>
</blockquote>

<p>I think that I have to pass kube cert <strong>effectively</strong> some where in travis configuration file, any suggestion please</p>

Smaillns
<p>Effectively, the problem was related to cluster certificates, in the article cited previously there is a base64 encoding issue which will make fail the secrets injection. so we have to add information to the <strong>kubernetes config file</strong>, we find the following block in <strong>inject_secret.sh</strong></p>
<pre><code>./kubectl config set clusters.udagramk8s.kops.ucci.uk.certificate-authority-data $CERTIFICATE_AUTHORITY_DATA
./kubectl config set users.udagramk8s.kops.ucci.uk.client-certificate-data &quot;$CLIENT_CERTIFICATE_DATA&quot;
./kubectl config set users.udagramk8s.kops.ucci.uk.client-key-data &quot;$CLIENT_KEY_DATA&quot;
./kubectl config set users.udagramk8s.kops.ucci.uk.password &quot;$KUBE_PASSWORD&quot;
./kubectl config set users.udagramk8s.kops.ucci.uk.net-basic-auth.password &quot;$KUBE_PASSWORD&quot;
</code></pre>
<p>And what we have to do to ensure the presence of these env variables, is to add them simply by the Travis-CI console, under project settings section
<a href="https://i.stack.imgur.com/nWz1E.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/nWz1E.png" alt="" /></a></p>
<p><strong>Note:</strong> we can get the variables values by using the following command <code>cat ~/.kube/config</code></p>
