coreos-kubernetes icon indicating copy to clipboard operation
coreos-kubernetes copied to clipboard

Unauthorized when accesing cluster in a Vagrant install

Open brpaz opened this issue 9 years ago • 2 comments

Hello. I follow all the instructions to deploy Kubernetes on vagrant but now when I try to access the cluster url via browser I just get a blank screen saying "Unauthorized".

Any ideas, whats missing?

brpaz avatar Oct 22 '16 10:10 brpaz

CoreOS/Vagrant is not related to the issue. kubernetes by default requires SSL communication by the self signed certificate. Your browser doesn't know the certificate, so it shows "unauthorized".

Therefore, currently it's bit cumbersome to use a browser to access directly your cluster. If you really want to access to the cluster via browser, you should be able to use kubectl proxy command. Please refer the link below: http://kubernetes.io/docs/user-guide/kubectl/kubectl_proxy/

But typically you don't need to use a browser to access your cluster (other than dashboard UI etc). Mostly k8s admin talks with a cluster with kubectl command. As long as kubectl get nodes returns your nodes, I assume you cluster is healthy.

rdtr avatar Oct 22 '16 12:10 rdtr

You have to generate a .p12 file out of the .pem files that get created during the install and import them in your browser to authenticate you.

Example openssl pkcs12 -export -inkey admin-key.pem -in admin.pem -out admin.p12

You can leave the password empty if you wish -- or not.

Once you have the admin.p12, go to your browser's certificates management tool (in Chrome "Settings" > "Manage certificates" and import this p12 certificate. It will prompt you for the password if you put one in. In the end, you should have something that looks like this:

image

Go back to your k8s dashboard, and it should work.

madchap avatar Mar 11 '17 10:03 madchap