X509 certificate signed by unknown authority without sudo

Rancher 2.x
1

Hi,I’m using Rancher-V2.2.5(Mac osx)
1.Copy kubconfig file from Rancher cluster page to ~/.kube/config.
2.When I run kubectl version ,returns “Unable to connect to the server: x509: certificate signed by unknown authority”.
But,When I run sudo kubectl version, It works ok.

1
12812×1208 998 KB

When I login with root in the shell,run with command kubectl version ,still returns “Unable to connect to the server: x509: certificate signed by unknown authority”.
I’m confused,what’s happend?Pls help me,Tks!