Comments (1)
Ok, I've figured this out.
Digging into the error a bit more, the server is rejecting the TLS Client Hello, because TLS v1.0 is unsupported on GKE 1.3.
How do we select the TLS version? In general this can be easily overridden in Requests (see this guide). But Requests lets urllib3 choose the default TLS version, which is usually the best available; that in turn depends on the installed version of OpenSSL:
>>> import ssl
>>> ssl.PROTOCOL_TLSv1_2
Traceback (most recent call last):
File "<stdin>", line 1, in <module>
AttributeError: 'module' object has no attribute 'PROTOCOL_TLSv1_2'
>>> ssl.OPENSSL_VERSION
'OpenSSL 0.9.8zh 14 Jan 2016'
Turns out on MacOS, the bundled OpenSSL version is antiquated. This also turns out to be much more of a pain to fix than expected; I'm using Python3.4, and Homebrew doesn't maintain pre-3.5 versions of Python3, so the following fix turned out to be the best for me:
http://stackoverflow.com/a/37757206/37481
For posterity, reproduced here, assuming a fully-configured pyenv install:
brew update
brew install openssl
brew link --force openssl
CFLAGS="-I$(brew --prefix openssl)/include" \
LDFLAGS="-L$(brew --prefix openssl)/lib" \
pyenv install -v 3.4.4
Sadly it doesn't appear to be sufficient to install a new openssl; a new Python must be installed and linked against the new OpenSSL.
from pykube.
Related Issues (20)
- Add new watch event types
- Delete ReplicationController does not support the Windows platform
- can't support windows platform?
- requests.exceptions.SSLError: hostname HOT 1
- Add example for getting attribute of object HOT 1
- relative paths in kube config file are not interpreted correctly HOT 5
- version api fails when called
- pykube generating tons of files in tmp
- Can we get a list of namespaces in a K8s cluster? HOT 2
- ObjectManager, providing resource.objects(), is not thread-safe
- Add KubeConfig.from_env_var or similar
- Kubernetes OIDC auth not working HOT 1
- support 'kubectl drain' HOT 1
- HTTPError: Job in version "v1" cannot be handled as a Job: [pos 264]: json: expect char '"' but got char '{' HOT 1
- certificate verify failed when REQUESTS_CA_BUNDLE environment variable is set HOT 1
- WatchQuery does not respect the `base` of an object
- Run command
- question about the crd
- Is pyKube still maintained? HOT 3
- Endpoint class has incorrect Kind.
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from pykube.