You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
Bug: in-cluster config is passing ssl_ca_cert file path instead of the content of the file #2143
Agreed it seems to be a bug that the code is only passing the filename instead of reading the content. Would be good if we can have a test to catch the bug.
@roycaihw:
This request has been marked as needing help from a contributor.
Guidelines
Please ensure that the issue body includes answers to the following questions:
Why are we solving this issue?
To address this issue, are there any code changes? If there are code changes, what needs to be done in the code and what places can the assignee treat as reference points?
Does this issue have zero to low barrier of entry?
How can the assignee reach out to you for help?
For more details on the requirements of such an issue, please see here and ensure that they are met.
If this request no longer meets these requirements, the label can be removed
by commenting with the /remove-help command.
Agreed it seems to be a bug that the code is only passing the filename instead of reading the content. Would be good if we can have a test to catch the bug.
/help
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.
This is still a bug, cannot use ansible k8s_info on a k3s node where the ~/.kube/config just contains client-certificate-data and certificate-authority-data
I also need the solution on the same, we have the requirement to pick the CA certificates from the databases as we are managing thousands of kubernetes clusters and could not maintation CA or kubeconfig file individually for each.
When using kubectl the go library defaults to reading both settings, but the python client only reads the certificate-authority setting in the get_cluster_info.
Activity
ggree1 commentedon Nov 24, 2023
Yeah.. Is there a way to pass cert data instead of ca file path for config.ssl_ca_cert?
roycaihw commentedon Dec 18, 2023
Agreed it seems to be a bug that the code is only passing the filename instead of reading the content. Would be good if we can have a test to catch the bug.
/help
k8s-ci-robot commentedon Dec 18, 2023
@roycaihw:
This request has been marked as needing help from a contributor.
Guidelines
Please ensure that the issue body includes answers to the following questions:
For more details on the requirements of such an issue, please see here and ensure that they are met.
If this request no longer meets these requirements, the label can be removed
by commenting with the
/remove-helpcommand.Details
In response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.
[-]Bug[/-][+]Bug: in-cluster config is passing ssl_ca_cert file path instead of the content of the file[/+]ddfreiling commentedon Feb 1, 2024
This is still a bug, cannot use ansible k8s_info on a k3s node where the ~/.kube/config just contains
client-certificate-dataandcertificate-authority-dataabhi-dev91 commentedon Feb 12, 2024
I also need the solution on the same, we have the requirement to pick the CA certificates from the databases as we are managing thousands of kubernetes clusters and could not maintation CA or kubeconfig file individually for each.
darshanip commentedon Feb 18, 2024
@roycaihw I can help on this one. Want me to draft PR?
fishstamp82 commentedon Jun 20, 2024
When using kubectl the go library defaults to reading both settings, but the python client only reads the certificate-authority setting in the get_cluster_info.
I found test cases mentioning certificate-authority-data but its never tested.
Would the approach be similar to kubectl to add support for certificate-authority-data in this codebase?