Authentication failed because "/" endpoint returns 403

[cscetbon]

I can query my k8s cluster using my certiticates and key :

k cluster-info
Kubernetes master is running at https://......
Grafana is running at http://......
Heapster is running at https://.....
KubeDNS is running at https://..../proxy
Kubemonitor is running at http://.....

But kubebox complains and asks me for a username/password/token.

Any workaround ?

[astefanutti]

May be related to #7.

[cscetbon]

@astefanutti yeah probably

[astefanutti]

Let me close this as it is followed-up in #7.

[astefanutti]

Kubebox assumes user is granted permission to discover master API endpoints, though that is not always the case, e.g.:

$ kubectl get --raw /
Error from server (Forbidden): forbidden: User "cscetbon" cannot get path "/"

[astefanutti]

@cscetbon could you check what returns the following:

$ kubectl get --raw /apis

[cscetbon]

@astefanutti https://pastebin.com/raw/qG5eM2aS

[astefanutti]

@cscetbon thanks. I just wanted to confirm you can access it.

It should be possible to make the call to / optional in Kubebox.

[cscetbon]

Eager to test and see it in action 😉

[sabrehagen]

Me too. Do you have a fix in a branch we could test?

[astefanutti]

I plan to have this issue fixed for the upcoming release 0.3.2.

[astefanutti]

It should be fixed with 98b9c33. I'll cut a new release with the fix ASAP.