Git Product home page Git Product logo

Comments (11)

dtzar avatar dtzar commented on September 18, 2024

For completeness here is the entire working log from a client connecting on a 1.6.6 ACS RP cluster:

[2017-11-08 22:21:33,308][INFO ][node                     ] [USAgent] version[2.3.3], pid[11], build[218bdf1/2016-05-17T15:40:04Z]
[2017-11-08 22:21:33,311][INFO ][node                     ] [USAgent] initializing ...
[2017-11-08 22:21:34,608][INFO ][plugins                  ] [USAgent] modules [reindex, lang-expression, lang-groovy], plugins [cloud-kubernetes], sites []
[2017-11-08 22:21:34,650][INFO ][env                      ] [USAgent] using [1] data paths, mounts [[/data (/dev/sda1)]], net usable_space [3.9gb], net total_
space [29gb], spins? [possibly], types [ext4]
[2017-11-08 22:21:34,655][INFO ][env                      ] [USAgent] heap size [247.5mb], compressed ordinary object pointers [true]
[2017-11-08 22:21:37,625][INFO ][node                     ] [USAgent] initialized
[2017-11-08 22:21:37,626][INFO ][node                     ] [USAgent] starting ...
[2017-11-08 22:21:37,760][INFO ][transport                ] [USAgent] publish_address {10.244.0.122:9300}, bound_addresses {10.244.0.122:9300}
[2017-11-08 22:21:37,765][INFO ][discovery                ] [USAgent] myesdb/yfHj9BmBSE6gf6gOuYdwjQ
[2017-11-08 22:21:38,603][INFO ][io.fabric8.elasticsearch.discovery.kubernetes.KubernetesUnicastHostsProvider] [USAgent] adding endpoint /10.244.2.128, transp
ort_address 10.244.2.128:9300
[2017-11-08 22:21:38,604][INFO ][io.fabric8.elasticsearch.discovery.kubernetes.KubernetesUnicastHostsProvider] [USAgent] adding endpoint /10.244.3.5, transpor
t_address 10.244.3.5:9300
[2017-11-08 22:21:40,151][INFO ][io.fabric8.elasticsearch.discovery.kubernetes.KubernetesUnicastHostsProvider] [USAgent] adding endpoint /10.244.2.128, transp
ort_address 10.244.2.128:9300
[2017-11-08 22:21:40,151][INFO ][io.fabric8.elasticsearch.discovery.kubernetes.KubernetesUnicastHostsProvider] [USAgent] adding endpoint /10.244.3.5, transport_address 10.244.3.5:9300
[2017-11-08 22:21:41,676][INFO ][io.fabric8.elasticsearch.discovery.kubernetes.KubernetesUnicastHostsProvider] [USAgent] adding endpoint /10.244.2.128, transport_address 10.244.2.128:9300
[2017-11-08 22:21:41,676][INFO ][io.fabric8.elasticsearch.discovery.kubernetes.KubernetesUnicastHostsProvider] [USAgent] adding endpoint /10.244.3.5, transport_address 10.244.3.5:9300
[2017-11-08 22:21:41,777][INFO ][cluster.service          ] [USAgent] detected_master {X-Cutioner}{CwWKgdcfQfSEJQ7ylJ9igg}{10.244.2.128}{10.244.2.128:9300}{data=false, master=true}, added {{Bu
g}{WwK9KMd_SsesF3aeLtn9ZQ}{10.244.0.120}{10.244.0.120:9300}{data=false, master=false},{Riot}{rXZ22r4XTbmQVwojhKv9Sg}{10.244.3.4}{10.244.3.4:9300}{data=false, master=false},{X-Cutioner}{CwWKgdc
fQfSEJQ7ylJ9igg}{10.244.2.128}{10.244.2.128:9300}{data=false, master=true},{Nebulon}{3yLdi9PiToWG4n9E1dCQiw}{10.244.3.5}{10.244.3.5:9300}{data=false, master=true},{Animus}{KtAtHJlmS8Oikx_CUkd6
Ug}{10.244.0.121}{10.244.0.121:9300}{master=false},{Kohl Harder Boulder Man}{qYakWoQFQQi7J1LraZ6isQ}{10.244.3.6}{10.244.3.6:9300}{master=false},}, reason: zen-disco-receive(from master [{X-Cut
ioner}{CwWKgdcfQfSEJQ7ylJ9igg}{10.244.2.128}{10.244.2.128:9300}{data=false, master=true}])
[2017-11-08 22:21:41,888][INFO ][node                     ] [USAgent] started

from aks.

slack avatar slack commented on September 18, 2024

Looks like we may have transposed the order of the kubernetes.default.svc hostname in the cert. Will open an internal bug.

Trying with simply kubernetes should work in the interim.

from aks.

carlossg avatar carlossg commented on September 18, 2024

kubernetes only gives host not found, had to go through the long dns name

from aks.

TomLarrow avatar TomLarrow commented on September 18, 2024

Any update on this? We're struggling with the same issue while trying to implement Zalenium https://github.com/zalando/zalenium/ Unfortunately it doesn't seem Zalenium has the option to provide an alternate hostname to connect to.

from aks.

slack avatar slack commented on September 18, 2024

Cluster certificate bug has been fixed and merged in build v2017111601. Let me know if you are still seeing issues with kubernetes hostname.

from aks.

ferantivero avatar ferantivero commented on September 18, 2024

@slack just out of curiosity, when does it take effect?

I'm in another namespace, so kubernetes can't be resolved. Like @carlossg I went with the fqdn alternative.

from aks.

slack avatar slack commented on September 18, 2024

@ferantivero using the long-form should work kubernetes.default.svc if your application is not deployed to the default namespace.

from aks.

ferantivero avatar ferantivero commented on September 18, 2024

Based on my understanding the long-form kubernetes.default.svc is how my app executes the request and consequently fails in the https validation because this issue.

I might be missing something here, sorry if that’s the case. But that’s why I was wondering when this cluster certificate bug fix takes effect (I’m eastus).

Either way I was able to workaround this 🙂

from aks.

anschoewe avatar anschoewe commented on September 18, 2024

@ferantivero , I'm hitting this same issue. I'm also in EastUS. How did you work around this?

from aks.

anschoewe avatar anschoewe commented on September 18, 2024

@ferantivero, please ignore my question. I figured it out. It was specific to my use case. I was using Jenkins with the 'carlossg/jenkins-kubernetes-plugin' and simply needed to update the Kubernetes URL it uses so that the cert matched the hostnames Kubernetes master's cert was presenting.

Manage Jenkins -> Configure System -> Cloud (section) -> Kubernetes URL: https://kubernetes.default.svc

(it was previously 'https://kubernetes.default')

from aks.

arianitu avatar arianitu commented on September 18, 2024

I'm running into this when trying to configure the Jenkins Kubernetes Plugin, I've tried:

https://kubernetes.default.svc
https://kubernetes.default
https://kubernetes

I get hostname not verified each time. I had to select Disable https certificate check for it to work.

Any ideas on how to fix this?

from aks.

Related Issues (20)

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.