Authentication failed because "/" endpoint returns 403

astefanutti / kubebox

⎈❏ Terminal and Web console for Kubernetes

http://astefanutti.github.io/kubebox

MIT License

2.15k stars 142 forks source link

Authentication failed because "/" endpoint returns 403 #21

Closed cscetbon closed 5 years ago

cscetbon commented 5 years ago

I can query my k8s cluster using my certiticates and key :

k cluster-info
Kubernetes master is running at https://......
Grafana is running at http://......
Heapster is running at https://.....
KubeDNS is running at https://..../proxy
Kubemonitor is running at http://.....

But kubebox complains and asks me for a username/password/token.

Any workaround ?

astefanutti commented 5 years ago

May be related to #7.

cscetbon commented 5 years ago

@astefanutti yeah probably

astefanutti commented 5 years ago

Let me close this as it is followed-up in #7.

astefanutti commented 5 years ago

Kubebox assumes user is granted permission to discover master API endpoints, though that is not always the case, e.g.:

$ kubectl get --raw /
Error from server (Forbidden): forbidden: User "cscetbon" cannot get path "/"

astefanutti commented 5 years ago

@cscetbon could you check what returns the following:

$ kubectl get --raw /apis

cscetbon commented 5 years ago

@astefanutti https://pastebin.com/raw/qG5eM2aS

astefanutti commented 5 years ago

@cscetbon thanks. I just wanted to confirm you can access it.

It should be possible to make the call to / optional in Kubebox.

cscetbon commented 5 years ago

Eager to test and see it in action 😉

sabrehagen commented 5 years ago

Me too. Do you have a fix in a branch we could test?

astefanutti commented 5 years ago

I plan to have this issue fixed for the upcoming release 0.3.2.

astefanutti commented 5 years ago

It should be fixed with 98b9c339058e45b8ed932ca356ece1b9210918ae. I'll cut a new release with the fix ASAP.