<p>I am trying to check the kubelet certificate permissions with <code>kubectl auth can-i</code> but it failed with the following error:</p>
<pre><code>root@ubuntu:~# kubectl --certificate-authority=/etc/kubernetes/pki/ca.crt --client-certificate=/var/lib/kubelet/pki/kubelet-client-current.pem --client-key=/var/lib/kubelet/pki/kubelet-client-current.pem auth can-i --list
Error in configuration:
* client-cert-data and client-cert are both specified for kubernetes-admin. client-cert-data will override.
* client-key-data and client-key are both specified for kubernetes-admin; client-key-data will override
</code></pre>
<p>I read the error, it writes that the some field will be override but I don't understand why I don't see the permissions or what I need to do in order to see, I appreciate your help.</p>

E235
<p>The error refers to you cert and key definitions on your kubeconfig file. Which is by default in <code>~/.kube/config</code> if you didn't set it as env variable KUBECONFIG.</p>
<p>Because on your kubeconfig there are cert data for user kubernetes-admin</p>
<pre><code>    - name: kubernetes-admin
      user:
        client-certificate-data: xxxx=
        client-key-data: xxx==
</code></pre>
<p>You can just comment out your users <code>client-certificate-data</code> and <code>client-key-data</code> on your kubeconfig file and try the command again.. I was getting the same error and it works when I put a comment.</p>
