Access Kubernetes api from within a pod container

Question

I'm trying to access kuberneets api from within a pod container but i get an error saying "unauthorized". This only happens in Kubernetes 0.18.0. Also it works perfectly fine when we use the machines external IP

Answer 1

I think you're missing a security token was not required in the previous versions, hence you started getting the error only in this updated version of kubernetes.

I think a simpler solution than running a proxy or installing golang on your container. Have a look at the example.

KUBE_TOKEN=$(</var/run/secrets/kubernetes.io/serviceaccount/token)
curl -sSk -H "Authorization: Bearer $KUBE_TOKEN" \
https://$KUBERNETES_SERVICE_HOST:$KUBERNETES_PORT_443_TCP_PORT/api/v1/namespaces/default/pods/$HOSTNAME

Answer 2

wget version:

KUBE_TOKEN=$(</var/run/secrets/kubernetes.io/serviceaccount/token)    
wget -vO- --ca-certificate /var/run/secrets/kubernetes.io/serviceaccount/ca.crt  --header "Authorization: Bearer $KUBE_TOKEN" https://$KUBERNETES_SERVICE_HOST:$KUBERNETES_PORT_443_TCP_PORT/api/v1/namespaces/default/pods/$HOSTNAME