GoogleContainerTools/skaffold · error

error creating REST client config for kubeContext %q: %w

Error message

error creating REST client config for kubeContext %q: %w

What it means

In getRestClientConfig, the clientcmd.ClientConfig built for the selected kubeContext produces a rest config via ClientConfig(). Any failure here — the error is non-nil and not the empty-config case — is wrapped with this message naming the kubeContext. It covers bad server URLs, missing CA files, missing auth credentials, etc.

Source

Thrown at pkg/skaffold/kubernetes/context/context.go:106

	rawConfig, err := getCurrentConfig()
	if err != nil {
		return nil, err
	}

	clientConfig := clientcmd.NewNonInteractiveClientConfig(rawConfig, kctx, &clientcmd.ConfigOverrides{CurrentContext: kctx}, clientcmd.NewDefaultClientConfigLoadingRules())
	restConfig, err := clientConfig.ClientConfig()
	if kctx == "" && kcfg == "" && clientcmd.IsEmptyConfig(err) {
		log.Entry(context.TODO()).Debug("no kube-context set and no kubeConfig found, attempting in-cluster config")
		restConfig, err := restclient.InClusterConfig()
		if err != nil {
			return restConfig, fmt.Errorf("error creating REST client config in-cluster: %w", err)
		}

		return restConfig, nil
	}
	if err != nil {
		return restConfig, fmt.Errorf("error creating REST client config for kubeContext %q: %w", kctx, err)
	}

	return restConfig, nil
}

// getCurrentConfig retrieves and caches the raw kubeConfig. The cache ensures that Skaffold always works with the identical kubeconfig,
// even if it was changed on disk.
func getCurrentConfig() (clientcmdapi.Config, error) {
	kubeConfigOnce.Do(func() {
		loadingRules := clientcmd.NewDefaultClientConfigLoadingRules()
		loadingRules.ExplicitPath = kubeConfigFile
		kubeConfig = clientcmd.NewNonInteractiveDeferredLoadingClientConfig(loadingRules, &clientcmd.ConfigOverrides{
			CurrentContext: kubeContext,
		})
	})

	cfg, err := kubeConfig.RawConfig()
	if kubeContext != "" {

View on GitHub (pinned to a1189de023)

Solutions

1. Run `kubectl config use-context <kctx>` then `kubectl cluster-info` to validate the context works with kubectl
2. Fix the kubeconfig entry: correct server URL and certificate-authority/client-key file paths (`kubectl config set-cluster ...`)
3. Re-authenticate (gcloud/az/aws eks update-kubeconfig) or re-generate the kubeconfig for the cluster

Example fix

// before: context points at deleted cluster
// after: regenerate credentials
gcloud container clusters get-credentials my-cluster --zone us-central1-a

raw, _ := clientcmd.NewNonInteractiveDeferredLoadingClientConfig(
    clientcmd.NewDefaultClientConfigLoadingRules(), nil).RawConfig()
ctxDef := raw.Contexts[kubeContext]
cl := raw.Clusters[ctxDef.Cluster]
if cl == nil {
    return fmt.Errorf("context %q references missing cluster", kubeContext)
}
if cl.CertificateAuthority != "" {
    if _, err := os.Stat(cl.CertificateAuthority); err != nil {
        return fmt.Errorf("CA file missing: %s", cl.CertificateAuthority)
    }
}

func contextUsable(kubeContext string) bool {
    cfg, err := clientcmd.NewNonInteractiveDeferredLoadingClientConfig(
        clientcmd.NewDefaultClientConfigLoadingRules(),
        &clientcmd.ConfigOverrides{CurrentContext: kubeContext}).ClientConfig()
    return err == nil && cfg.Host != ""
}

cfg, err := context.GetRestClientConfig(kubeContext)
if err != nil {
    return fmt.Errorf("fix kubeconfig entry for %q (`kubectl config get-contexts`): %w", kubeContext, err)
}

When it happens

Trigger: GetRestClientConfig(kctx) when the context's cluster has an invalid/unreachable server URL, the certificate-authority file path doesn't exist, client certificate/key files are missing, or the user entry's auth data is invalid.

Common situations: Kubeconfig written by hand with wrong CA paths; context left over from a deleted cluster; expired credentials; KUBECONFIG merge producing a context referencing a missing user or cluster.

Related errors

• getting Kubernetes client: %w
• unable to connect to Kubernetes: %w
• error getting Kubernetes dynamic client: %w
• error getting Kubernetes client: %w
• resolving namespace: %w

AI-assisted analysis of GoogleContainerTools/skaffold@a1189de023 (2026-09-05). Data as JSON: /api/errors/a53934f7d017809e. Report an issue: GitHub.