Kubernetes- HTTPS API return Unauthorized

Question

When my kubernetes api runs the following command

curl https://192.168.0.139 --cacert /home/mongeo/ku-certs/ca.pem

It throws an error saying “unauthorized”

Request curl localhost:8080 works perfectly fine

How do I get data on https?

Answer 1

Follow these steps:

1. Find address Server Api - open /etc/kubernetes/kubelet.conf, example : server: https://10.1.32.120:6443
2. Find token, open /etc/kubernetes/pki/tokens.csv, example : 4c95a1a22d19b20811,kubeadm-node-csr,07ccbf35-e206-11e6-ab8f-0010184e550e,system:kubelet-bootstrap
3. In this case the token is, 4c95a1a22d19b20811
4. If use postman, add header,  Authorization: Bearer 4c95a1a22d19b20811

Answer 2

Try something like this:

lincai@pdbuddy:~/blackbox$ curl -v --cacert ./ca.pem --key ./admin-key.pem --cert ./admin.pem  https://xxxx/api/v1/

* Hostname was NOT found in DNS cache

>< HTTP/1.1 200 OK

Answer 3

Try to specify --token-auth-file=<file> or --basic-auth-file=<otherfile>

Answer 4

One way to do this is by creating an SSH tunnel, for example,
ssh -L 9000:localhost:8080 roto@master.node
this will get the connection from your local port tocalhost:8080 on your server. You can query the api on your local port as long as the tunnel is open.