[caasp-beta] RE : kubectl requires username and password

Paul Gonin paul.gonin at suse.com
Wed Sep 27 09:04:50 MDT 2017


Hi,
It should be on the media so you can install it on the admin nodeIt is
installed by default on admin node.
You can also get (currently) rpms for different openSUSE/SUSE flavorsht
tps://build.opensuse.org/repositories/devel:CaaSP:Head:ControllerNode/c
aasp-cli
And there is also a windows Build from Robhttps://github.com/rssfed23/c
aasp-cli-windows/releases
Tested / works but not supported (yet, but I assume to come)

Once you have caasp-cliexport KUBECONFIG=<pathtokubeconfig> (set
KUBECONFIG=kubeconfig in windows cmd shell)
caasp-cli login -u caasp-user -p caasp-password -s https://caasp.fqdn:6
443

and then you can use kubectl as previously

For caasp-user and caasp-password you can use caasp admin credentials.
You can also create users in local ldap 

rgds
Paul

Le mercredi 27 septembre 2017 à 14:52 +0000, Ns, Rushi a écrit :
> Thanks, where can I download . I see from github I can’t download the
> link .
>  
> https://github.com/kubic-project/caasp-cli
>  
>  
> 
> Best Regards,
>  
> Rushi.
> I MAY BE ONLY ONE PERSON, BUT I CAN BE ONE PERSON WHO MAKES A
> DIFFERENCE
> 
>  
>  
> 
> From: Paul Gonin <pgonin at suse.com>
> 
> Date: Tuesday, September 26, 2017 at 1:31 PM
> 
> To: "caasp-beta at lists.suse.com" <caasp-beta at lists.suse.com>, Rushi NS
> <rushi.ns at sap.com>
> 
> Subject: RE : [caasp-beta] kubectl requires username and password
> 
> 
>  
> 
> Hi, 
> 
>  
> 
> 
> With RC1, RBAC is available
> 
> 
> Consequence is that you have to use caasp-ctl to login to CaaSP and
> modify your kubectl and inject credentials in it.
> 
> 
>  
> 
> 
> Rgds
> 
> 
> Paul
> 
> 
>  
> 
> 
>  
> 
> 
> -------- Message d'origine --------
> 
> 
> De : "Ns, Rushi" <rushi.ns at sap.com> 
> 
> 
> Date : 26/09/2017 22:04 (GMT+01:00) 
> 
> 
> À : SUSE Beta Program <beta-programs at lists.suse.com>, caasp-beta at list
> s.suse.com
> 
> 
> 
> Objet : [caasp-beta] kubectl requires username and password 
> 
> 
> 
>  
> 
> 
> 
> >>> "Ns, Rushi" 09/26/2017 21:04 >>>
>  
> Hi 
>  
> I setup new cluster with this release and everything worked. I have 3
> masters/10 workers ..looks fine VELUM web page as well and I have
> downloaded kubeconfig and tried to do some workload test but issue
> with
>  access cluster.
>  
>  
> I have issue with using KUBECTL command line ..whatever “kubectl” I
> run  requires permission. I setup velum with my userid email and
> password, I thought it requires that and I tried but its not ?
> 
>  
> I have also tried root (linux) master/workers but it doesn’t take
> that too?
> 
>  
> Does anyone know what is the issue.
>  
>  
> kubectl get cluster-info 
> 
>  
> kubectl get nodes
> Please enter Username: rushi.ns at sap.com
> Please enter Password: *********
>                                 Error from server (Forbidden): User
> "system:anonymous" cannot list nodes at the cluster scope. (get
> nodes)
>  
> kubectl get nodes
> Please enter Username: admin
> Please enter Password: ********
>                                Unable to connect to the server: x509:
> certificate is valid for 172.24.0.1, 172.16.18.0, 127.0.0.1,
> 172.16.18.1, 10.48.164.142, not 10.48.164.144
>  
> kubectl get nodes
> Please enter Username: root
> Please enter Password: ********
>                                Unable to connect to the server: x509:
> certificate is valid for 172.24.0.1, 172.16.22.0, 127.0.0.1,
> 172.16.22.1, 10.48.164.141, not 10.48.164.144
> 
> Best Regards,
>  
> Rushi.
> I MAY BE ONLY ONE PERSON, BUT I CAN BE ONE PERSON WHO MAKES A
> DIFFERENCE
> 
>  
>  
> 
> From: <caasp-beta-bounces at lists.suse.com> on behalf of SUSE Beta
> Program <beta-programs at lists.suse.com>
> 
> Reply-To: SUSE Beta Program <beta-programs at lists.suse.com>
> 
> Date: Friday, September 22, 2017 at 7:48 AM
> 
> To: "caasp-beta at lists.suse.com" <caasp-beta at lists.suse.com>
> 
> Subject: [caasp-beta] [ANNOUNCE] SUSE Container as a Service Platform
> 2 RC 1 is available!
> 
> 
>  
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> Having trouble viewing this email? Please check the plain text
> version of it with your mailer.
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
>  
> 
> 
> 
> 
> 
> 
> 
> 
> 
>  
> 
> 
> 
> 
>  
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
>  
> 
> 
> 
> 
>  
> 
> 
> 
> 
>  
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
>  
> 
> 
> 
> 
>  
> 
> 
> 
> 
>  
> 
> 
> 
> 
> 
> 
> 
> 
> 
> We are happy to announce
> SUSE CaaS Platform 2
> Release Candidate 1!
> 
> 
> 
> 
> 
> 
> 
> 
> 
>  
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> Download
>> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
>  
> 
> 
> 
> 
> 
> 
> 
> 
> Please check out our dedicated
> SUSE CaaS Platform Beta web page, where you will find all the
> information needed around SUSE CaaS Platform Beta.
> 
> 
> 
> 
> 
> 
> 
> 
> 
>  
> 
> 
> 
> 
> 
> 
> 
> 
> 
> What’s New with SUSE CaaS Platform 2 RC 1?
> 
> 
> 
> 
> 
> 
> 
> 
>  
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> K8s Multi-Master: Kubernetes Multi Master for building High-
> Availability clusters.
> caasp-cli: It's the new command line client for interacting with a
> CaaS Platform cluster.
>  See for details.
> Dex: Dex is an identity service that uses OpenID Connect to drive
> authentication for other
>  apps. See for details.
> OpenLDAP2: OpenLDAP2 running on an SLE12 container guest.
> 
> 
> 
> 
> 
> 
> 
> 
>  
> 
> 
> 
> 
> 
> 
> 
> 
> 
> Things to consider for this Beta?
> 
> 
> 
> 
> 
> 
> 
> 
>  
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> DHCP
> 
> 
> Your DHCP server should provide resolveable hostnames. If this is not
> the case like with libvirt/KVM, you should consider providing one
> yourself by appending this kernel parameter
>  "hostname=HOSTNAME" during installation.
> 
> However, the kubeconfig file downloaded from the Dashboard could
> contain an incorrect "server" hostname that should be replaced with
> the IP address of your Master. For more information
>  read: https://en.opensuse.org/SDB:Linuxrc#Network_Configuration
> 
> 
> Autoyast/VMX-Images
> 
> 
> If you install via autoyast or one of the provided VMX beta images
> (KVM,Xen,VMware,...) please set a password or SSH key via cloud-init
> to be able to login.
> 
> 
> 
> 
> 
> 
> 
> 
>  
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> Release
>  plan ›
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> Release
>  Notes ›
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> Documentation
>> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
>  
> 
> 
> 
> 
>  
> 
> 
> 
> 
>  
> 
> 
> 
> 
> 
> 
> 
> 
> 
> Have fun beta testing!
> 
> Your SUSE Linux Enterprise Team
> 
> 
> 
> 
> 
> 
> 
> 
>  
> 
> 
> 
> 
> 
> 
> 
> 
> 
>  
> 
> 
> 
> 
>  
> 
> 
> 
> 
> 
> 
> 
> 
> Please refer to our dedicated
> SUSE CaaSP Beta Program webpage for any general information. However,
> do not hesitate to contact us at
> beta-programs at lists.suse.com if you have any questions.
> You received this email because you're signed up to get updates from
> us.
> 
> Click here to unsubscribe.
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
>                                                            
> 
> 
> 
> 
> 
> _______________________________________________
> caasp-beta mailing list
> caasp-beta at lists.suse.com
> http://lists.suse.com/mailman/listinfo/caasp-beta
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.suse.com/pipermail/caasp-beta/attachments/20170927/9e573e02/attachment.htm>


More information about the caasp-beta mailing list