Hi I'm trying to use

kubectl

with a downstream cluster. I have fetched the kubeconfig with rancher cli:

rancher clusters kubeconfig CLUSTER-ID CLUSTER-NAME > kubeconfig

kubectl

commands fail with

Unable to connect to the server: x509: certificate signed by unknown authority

where should I look into to find the problem? which certificate is it talking about? is this related to the contents of

clusters.*.cluster.certificate-authority-data

in the kubeconfig file?