This message was deleted.

self-answer: kube-root-ca.crt is the correct ca to be used. but you have to copy and save it to .pem formate before addingto keychaion.