How is the api-conversion run?

[jrivers96]

Is the api-conversion tool suppose to be run from where you run kubectl or from within the cluster?

bin/api-conversion.sh convert-resource --all-namespaces --debug
io.fabric8.kubernetes.client.KubernetesClientException: An error has occurred.
	at io.fabric8.kubernetes.client.KubernetesClientException.launderThrowable(KubernetesClientException.java:64)
	at io.fabric8.kubernetes.client.KubernetesClientException.launderThrowable(KubernetesClientException.java:53)
	at io.fabric8.kubernetes.client.utils.HttpClientUtils.createHttpClient(HttpClientUtils.java:228)
	at io.fabric8.kubernetes.client.utils.HttpClientUtils.createHttpClient(HttpClientUtils.java:66)
	at io.fabric8.kubernetes.client.BaseClient.<init>(BaseClient.java:51)
	at io.fabric8.kubernetes.client.BaseClient.<init>(BaseClient.java:43)
	at io.fabric8.kubernetes.client.DefaultKubernetesClient.<init>(DefaultKubernetesClient.java:139)
	at io.strimzi.kafka.api.conversion.cli.ConvertResourceCommand.run(ConvertResourceCommand.java:183)
	at picocli.CommandLine.executeUserObject(CommandLine.java:1919)
	at picocli.CommandLine.access$1200(CommandLine.java:145)
	at picocli.CommandLine$RunLast.executeUserObjectOfLastSubcommandWithSameParent(CommandLine.java:2332)
	at picocli.CommandLine$RunLast.handle(CommandLine.java:2326)
	at picocli.CommandLine$RunLast.handle(CommandLine.java:2291)
	at picocli.CommandLine$AbstractParseResultHandler.execute(CommandLine.java:2159)
	at picocli.CommandLine.execute(CommandLine.java:2058)
	at io.strimzi.kafka.api.conversion.cli.EntryCommand.main(EntryCommand.java:31)
Caused by: java.security.cert.CertificateException: Could not parse certificate: java.io.IOException: Empty input
	at java.base/sun.security.provider.X509Factory.engineGenerateCertificate(X509Factory.java:115)
	at java.base/java.security.cert.CertificateFactory.generateCertificate(CertificateFactory.java:355)
	at io.fabric8.kubernetes.client.internal.CertUtils.createTrustStore(CertUtils.java:105)
	at io.fabric8.kubernetes.client.internal.CertUtils.createTrustStore(CertUtils.java:81)
	at io.fabric8.kubernetes.client.internal.SSLUtils.trustManagers(SSLUtils.java:115)
	at io.fabric8.kubernetes.client.internal.SSLUtils.trustManagers(SSLUtils.java:94)
	at io.fabric8.kubernetes.client.utils.HttpClientUtils.createHttpClient(HttpClientUtils.java:122)
	... 13 more
Caused by: java.io.IOException: Empty input
	at java.base/sun.security.provider.X509Factory.engineGenerateCertificate(X509Factory.java:111)
	... 19 more

[scholzj]

You should run it from where you run kubectl. From the error, it looks like it has some problem parsing some certificate from your Kubernetes cluster. It is using the Fabric8 Kubernetes client ... so you should be able to use its configuration env var to configure how it deals with TLS: https://github.com/fabric8io/kubernetes-client#configuring-the-client ... I guess in the worst case you can try KUBERNETES_TRUST_CERTIFICATES.