Comments (11)
For completeness here is the entire working log from a client connecting on a 1.6.6 ACS RP cluster:
[2017-11-08 22:21:33,308][INFO ][node ] [USAgent] version[2.3.3], pid[11], build[218bdf1/2016-05-17T15:40:04Z]
[2017-11-08 22:21:33,311][INFO ][node ] [USAgent] initializing ...
[2017-11-08 22:21:34,608][INFO ][plugins ] [USAgent] modules [reindex, lang-expression, lang-groovy], plugins [cloud-kubernetes], sites []
[2017-11-08 22:21:34,650][INFO ][env ] [USAgent] using [1] data paths, mounts [[/data (/dev/sda1)]], net usable_space [3.9gb], net total_
space [29gb], spins? [possibly], types [ext4]
[2017-11-08 22:21:34,655][INFO ][env ] [USAgent] heap size [247.5mb], compressed ordinary object pointers [true]
[2017-11-08 22:21:37,625][INFO ][node ] [USAgent] initialized
[2017-11-08 22:21:37,626][INFO ][node ] [USAgent] starting ...
[2017-11-08 22:21:37,760][INFO ][transport ] [USAgent] publish_address {10.244.0.122:9300}, bound_addresses {10.244.0.122:9300}
[2017-11-08 22:21:37,765][INFO ][discovery ] [USAgent] myesdb/yfHj9BmBSE6gf6gOuYdwjQ
[2017-11-08 22:21:38,603][INFO ][io.fabric8.elasticsearch.discovery.kubernetes.KubernetesUnicastHostsProvider] [USAgent] adding endpoint /10.244.2.128, transp
ort_address 10.244.2.128:9300
[2017-11-08 22:21:38,604][INFO ][io.fabric8.elasticsearch.discovery.kubernetes.KubernetesUnicastHostsProvider] [USAgent] adding endpoint /10.244.3.5, transpor
t_address 10.244.3.5:9300
[2017-11-08 22:21:40,151][INFO ][io.fabric8.elasticsearch.discovery.kubernetes.KubernetesUnicastHostsProvider] [USAgent] adding endpoint /10.244.2.128, transp
ort_address 10.244.2.128:9300
[2017-11-08 22:21:40,151][INFO ][io.fabric8.elasticsearch.discovery.kubernetes.KubernetesUnicastHostsProvider] [USAgent] adding endpoint /10.244.3.5, transport_address 10.244.3.5:9300
[2017-11-08 22:21:41,676][INFO ][io.fabric8.elasticsearch.discovery.kubernetes.KubernetesUnicastHostsProvider] [USAgent] adding endpoint /10.244.2.128, transport_address 10.244.2.128:9300
[2017-11-08 22:21:41,676][INFO ][io.fabric8.elasticsearch.discovery.kubernetes.KubernetesUnicastHostsProvider] [USAgent] adding endpoint /10.244.3.5, transport_address 10.244.3.5:9300
[2017-11-08 22:21:41,777][INFO ][cluster.service ] [USAgent] detected_master {X-Cutioner}{CwWKgdcfQfSEJQ7ylJ9igg}{10.244.2.128}{10.244.2.128:9300}{data=false, master=true}, added {{Bu
g}{WwK9KMd_SsesF3aeLtn9ZQ}{10.244.0.120}{10.244.0.120:9300}{data=false, master=false},{Riot}{rXZ22r4XTbmQVwojhKv9Sg}{10.244.3.4}{10.244.3.4:9300}{data=false, master=false},{X-Cutioner}{CwWKgdc
fQfSEJQ7ylJ9igg}{10.244.2.128}{10.244.2.128:9300}{data=false, master=true},{Nebulon}{3yLdi9PiToWG4n9E1dCQiw}{10.244.3.5}{10.244.3.5:9300}{data=false, master=true},{Animus}{KtAtHJlmS8Oikx_CUkd6
Ug}{10.244.0.121}{10.244.0.121:9300}{master=false},{Kohl Harder Boulder Man}{qYakWoQFQQi7J1LraZ6isQ}{10.244.3.6}{10.244.3.6:9300}{master=false},}, reason: zen-disco-receive(from master [{X-Cut
ioner}{CwWKgdcfQfSEJQ7ylJ9igg}{10.244.2.128}{10.244.2.128:9300}{data=false, master=true}])
[2017-11-08 22:21:41,888][INFO ][node ] [USAgent] started
from aks.
Looks like we may have transposed the order of the kubernetes.default.svc
hostname in the cert. Will open an internal bug.
Trying with simply kubernetes
should work in the interim.
from aks.
kubernetes
only gives host not found, had to go through the long dns name
from aks.
Any update on this? We're struggling with the same issue while trying to implement Zalenium https://github.com/zalando/zalenium/ Unfortunately it doesn't seem Zalenium has the option to provide an alternate hostname to connect to.
from aks.
Cluster certificate bug has been fixed and merged in build v2017111601
. Let me know if you are still seeing issues with kubernetes
hostname.
from aks.
@slack just out of curiosity, when does it take effect?
I'm in another namespace, so kubernetes
can't be resolved. Like @carlossg I went with the fqdn alternative.
from aks.
@ferantivero using the long-form should work kubernetes.default.svc
if your application is not deployed to the default
namespace.
from aks.
Based on my understanding the long-form kubernetes.default.svc
is how my app executes the request and consequently fails in the https validation because this issue.
I might be missing something here, sorry if that’s the case. But that’s why I was wondering when this cluster certificate bug fix takes effect (I’m eastus).
Either way I was able to workaround this 🙂
from aks.
@ferantivero , I'm hitting this same issue. I'm also in EastUS. How did you work around this?
from aks.
@ferantivero, please ignore my question. I figured it out. It was specific to my use case. I was using Jenkins with the 'carlossg/jenkins-kubernetes-plugin' and simply needed to update the Kubernetes URL it uses so that the cert matched the hostnames Kubernetes master's cert was presenting.
Manage Jenkins -> Configure System -> Cloud (section) -> Kubernetes URL: https://kubernetes.default.svc
(it was previously 'https://kubernetes.default')
from aks.
I'm running into this when trying to configure the Jenkins Kubernetes Plugin, I've tried:
https://kubernetes.default.svc
https://kubernetes.default
https://kubernetes
I get hostname not verified each time. I had to select Disable https certificate check
for it to work.
Any ideas on how to fix this?
from aks.
Related Issues (20)
- [Question] What is the difference of availability zone settings between AKS and nodepool? HOT 1
- [BUG] Issues from the roadmap get stale and auto-closed
- [Feedback] Document additional steps needed to deploy Istio managed add-on in cluster using a HTTP Proxy HOT 2
- [BUG] Pod network theoretical IPs calculations blocks cluster autoscaler HOT 2
- AKS will start rejecting requests with unknown AgentPool mode starting on 2025-01-01 HOT 1
- [Feature] managed istio egress gateway support HOT 2
- [BREAKING CHANGE] KEDA 2.15 and KEDA 2.14 introduces multiple breaking changes in AKS v1.30+ HOT 4
- AKS GPU Image (preview) will be retired on January 1, 2025
- [BUG] Test flow HOT 3
- [BUG] [test] Testing flow HOT 1
- [Feature] Azure CNI Overlay Dual-stack Windows Support HOT 1
- [Feature] Azure CNI Powered by Cilium Azure CNI Overlay Dual-stack support HOT 2
- Bump KEDA version to 2.15.1 on AKS 1.31 preview HOT 2
- AKS v1.31 public preview
- Attach ACR support in AKS Vs Code extension HOT 1
- Deployment Safeguards - Introduction of Pod Security Standards
- Bump KEDA version to 2.14.1 on AKS 1.30 HOT 3
- Nodepool VM SKU resize
- [BUG] Private DNS record not created by webAppRouting addon's Internal IngressController HOT 3
- [Feature] Enable the addition of Windows node pools after migrating from Kubenet to Azure CNI
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from aks.