[caasp-beta] How to resolve 'Unauthorized' error message on kubernetes dashboard?

[Rob Knight]

Hi George.

The reason it shows unauthorised is because you’re accessing the dashboard directly and unable to pass through authentication credentials (we only support certificates) via your browser.

To access the dashboard download and install the kubeconfig file presented by the web interface you used to bootstrap the cluster.

Then run “kubectl proxy” on your local machine.

The Kubernetes dashboard will now be accessible in the browser at http://localhost:8001/ui

What kubectl is doing is creating a tunnel into the API server that’s already authenticated to enable you to use the UI.

Some other Kubernetes distributions don’t require this because they support digest user authentication (or no authentication at all). Both of these methods are very insecure and will be removed in future Kubernetes versions anyway hence why we go with x509 certificates.



----
Rob de Canha-Knight
EMEA Platform and Management Technical Strategist
SUSE
rob.knight at suse.com
(M) +44 7392 087303
(TW) rssfed23<https://twitter.com/rssfed23>
----
[ignature_1414394216]<http://www.susecon.com/>
Register with discount code isrrksc17 to save 25%!
----
[nature_1566005168]
[ignature_472913852]
[ignature_717231032] <https://twitter.com/suse> [ignature_1195553855] <https://www.linkedin.com/in/rssfed23/>  [ignature_1246601718] <https://www.facebook.com/rssfed23>  [ignature_2009975471]  <https://plus.google.com/+SUSE/posts> [ignature_1272807470] <https://www.youtube.com/user/susevideo>


From: <caasp-beta-bounces at lists.suse.com> on behalf of George Wu <georgewu at qnap.com>
Date: Tuesday, 11 July 2017 at 04:54
To: "caasp-beta at lists.suse.com" <caasp-beta at lists.suse.com>
Subject: [caasp-beta] How to resolve 'Unauthorized' error message on kubernetes dashboard?

I installed 3 nodes by using SUSE-CaaS-Platform-1.0-DVD-x86_64-RC1-DVD1.iso. One node is admin, one is master and the other is worker. These nodes got IP address 192.168.10.107(admin), 192.168.10.108(master) and 192.168.10.109(node) by DHCP. After installation, master and worker shows their status on Velum dashboard. I downloaded kubectl config file from Velum dashboard (Cluster Status page) and copied it to master. The config is put at /root/.kube/config.

When I tried to login kubernetes dashboard, I used the web address https://192.168.10.108:6443. It shows 'Unauthorized' on browser.

What's wrong with my installation?

Regards,
George

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.suse.com/pipermail/caasp-beta/attachments/20170711/2c53deaf/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 17142 bytes
Desc: image001.png
URL: <http://lists.suse.com/pipermail/caasp-beta/attachments/20170711/2c53deaf/attachment.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.png
Type: image/png
Size: 2946 bytes
Desc: image002.png
URL: <http://lists.suse.com/pipermail/caasp-beta/attachments/20170711/2c53deaf/attachment-0001.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image003.jpg
Type: image/jpeg
Size: 13339 bytes
Desc: image003.jpg
URL: <http://lists.suse.com/pipermail/caasp-beta/attachments/20170711/2c53deaf/attachment.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image004.png
Type: image/png
Size: 779 bytes
Desc: image004.png
URL: <http://lists.suse.com/pipermail/caasp-beta/attachments/20170711/2c53deaf/attachment-0002.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image005.png
Type: image/png
Size: 753 bytes
Desc: image005.png
URL: <http://lists.suse.com/pipermail/caasp-beta/attachments/20170711/2c53deaf/attachment-0003.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image006.png
Type: image/png
Size: 745 bytes
Desc: image006.png
URL: <http://lists.suse.com/pipermail/caasp-beta/attachments/20170711/2c53deaf/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image007.png
Type: image/png
Size: 933 bytes
Desc: image007.png
URL: <http://lists.suse.com/pipermail/caasp-beta/attachments/20170711/2c53deaf/attachment-0005.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image008.png
Type: image/png
Size: 791 bytes
Desc: image008.png
URL: <http://lists.suse.com/pipermail/caasp-beta/attachments/20170711/2c53deaf/attachment-0006.png>