lensapp / lens

Lens - The way the world runs Kubernetes
https://k8slens.dev/
MIT License
22.47k stars 1.46k forks source link

Lens terminal on Mac Arm #7204

Open Francois-Royer opened 1 year ago

Francois-Royer commented 1 year ago

Describe the bug The terminal in pod or node report "error: unable to upgrade connection: error dialing backend: remote error: tls: unrecognized name" with OSX arm version, intel version work fine.

Our kube api server have been hardenized and support only highly secured TLS Cipher suite. It seems that Lens terminal proxy doesn't support it in arm version: it use TLS ECDH with the following curve secp521r1:secp384r1:prime256v1 on nginx

To Reproduce Steps to reproduce the behavior:

  1. Put a proxy in front of kubernetes api with ecdh cipher suite only with curve secp521r1:secp384r1:prime256v1
  2. connect to cluster
  3. try to open a terminal in pod
  4. See error

Expected behavior Arm version work same as Intel version

Environment (please complete the following information):

Logs: When you run the application executable from command line you will see some logging output. Please paste them here:

error: unable to upgrade connection: error dialing backend: remote error: tls: unrecognized name

Additional context Intel version work fine on same machine with same configuration so it's pretty sure it's linked to arm version.

renatovieiraarmac commented 1 year ago

I am have a problem, not possible connect bash in pod.

My mac is arm.

image
Nokel81 commented 1 year ago

@Francois-Royer Are you using the arm64 or amd64 version of Lens Desktop?

Francois-Royer commented 1 year ago

When I use arm64 I have the bug, when I use amd64 it works.

Francois-Royer commented 1 month ago

It seems that the issue as also a link with kube config insecure-skip-tls-verify: true. If you add this setting you have the error, if you remove it, it works.