[caasp-beta] RE : kubectl requires username and password

Paul Gonin pgonin at suse.com
Tue Sep 26 14:31:04 MDT 2017

With RC1, RBAC is availableConsequence is that you have to use caasp-ctl to login to CaaSP and modify your kubectl and
inject credentials in it.
</div><!-- originalMessage --><div>-------- Message d'origine --------</div><div>De : "Ns, Rushi" <rushi.ns at sap.com>
</div><div>Date : 26/09/2017  22:04  (GMT+01:00) </div><div>À : SUSE Beta Program <beta-programs at lists.suse.com>,
caasp-beta at lists.suse.com </div><div>Objet : [caasp-beta] kubectl requires username and password </div><div>
>>> "Ns, Rushi" <rushi.ns at sap.com> 09/26/2017 21:04 >>>


I setup new cluster with this release and everything worked. I have 3 masters/10 workers ..looks fine VELUM web page as
well and I have downloaded kubeconfig and tried to do some workload test but issue with access cluster.

I have issue with using KUBECTL command line ..whatever “kubectl” I run  requires permission. I setup velum with my
userid email and password, I thought it requires that and I tried but its not ?

I have also tried root (linux) master/workers but it doesn’t take that too?

Does anyone know what is the issue.

kubectl get cluster-info

kubectl get nodes
Please enter Username: rushi.ns at sap.com
Please enter Password: *********
                                Error from server (Forbidden): User "system:anonymous" cannot list nodes at the cluster
scope. (get nodes)

kubectl get nodes
Please enter Username: admin
Please enter Password: ********
                               Unable to connect to the server: x509: certificate is valid for,,,,, not

kubectl get nodes
Please enter Username: root
Please enter Password: ********
                               Unable to connect to the server: x509: certificate is valid for,,,,, not
Best Regards,


From: <caasp-beta-bounces at lists.suse.com> on behalf of SUSE Beta Program <beta-programs at lists.suse.com>
Reply-To: SUSE Beta Program <beta-programs at lists.suse.com>
Date: Friday, September 22, 2017 at 7:48 AM
To: "caasp-beta at lists.suse.com" <caasp-beta at lists.suse.com>
Subject: [caasp-beta] [ANNOUNCE] SUSE Container as a Service Platform 2 RC 1 is available!

Having trouble viewing this email? Please check the plain text version of it with your mailer.



We are happy to announce SUSE CaaS Platform 2 Release Candidate 1!

Download ›<https://www.suse.com/betaprogram/caasp-beta/#download>

Please check out our dedicated SUSE CaaS Platform Beta web page<https://www.suse.com/betaprogram/caasp-beta/>, where you
will find all the information needed around SUSE CaaS Platform Beta.

What’s New with SUSE CaaS Platform 2 RC 1?

  *   K8s Multi-Master: Kubernetes Multi Master for building High-Availability clusters.
  *   caasp-cli: It's the new command line client for interacting with a CaaS Platform cluster. See for
  *   Dex: Dex is an identity service that uses OpenID Connect to drive authentication for other apps. See for
  *   OpenLDAP2: OpenLDAP2 running on an SLE12 container guest.

Things to consider for this Beta?

  *   DHCP

Your DHCP server should provide resolveable hostnames. If this is not the case like with libvirt/KVM, you should
consider providing one yourself by appending this kernel parameter "hostname=HOSTNAME" during installation.

However, the kubeconfig file downloaded from the Dashboard could contain an incorrect "server" hostname that should be
replaced with the IP address of your Master. For more informatioIf you install via autoyast or one of the provided VMX beta images (KVM,Xen,VMware,...) please set a password or SSH key
via cloud-init to be able to login.

Release plan ›<https://www.suse.com/betaprogram/caasp-beta/#releases>

Release Notes ›<https://www.suse.com/betaprogram/caasp-beta/#releasenotes>

Documentation ›<https://www.suse.com/betaprogram/caasp-beta/#documentation>

Have fun beta testing!

Your SUSE Linux Enterprise Team

Please refer to our dedicated SUSE CaaSP Beta Program<https://www.suse.com/betaprogram/caasp-beta/> webpage for any
general information. However, do not hesitate to contact us at
beta-programs at lists.suse.com<mailto:beta-programs at lists.suse.com> if you have any questions.

You received this email because you're signed up to get updates from us. Click here to
unsubscribe.<mailto:beta-programs at lists.suse.com?subject=Unsubscribe%20from%20SUSE%20CaaSP%20Beta&body=Unsubscribe%20Unsubscribe%20from%20SUSE%20CaaSP%20Beta>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.suse.com/pipermail/caasp-beta/attachments/20170926/27a9fff5/attachment.htm>

More information about the caasp-beta mailing list