Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

External CA: Kubeadm Kubeconfig validation fails when using CA bundle #81370

Closed
boluisa opened this issue Aug 13, 2019 · 3 comments

Comments

@boluisa
Copy link

commented Aug 13, 2019

What happened:

the admin.conf file does not exists or it is not valid: a kubeconfig file "/etc/kubernetes/admin.conf" exists already but has got the wrong CA cert```

**What you expected to happen**:
Expected the Kubeconfig validation to pass. see here for what might be causing issue.
https://github.com/kubernetes/kubernetes/blob/master/cmd/kubeadm/app/util/pkiutil/pki_helpers.go#L244

**How to reproduce it (as minimally and precisely as possible)**:
generate a bundled cert, with ca.crt and ca.key files left in /etc/kubernetes/pki directory.
next, run ```kubeadm init```

**Environment**:
- Kubernetes version (use `kubectl version`): v1.14.3

@boluisa boluisa added the kind/bug label Aug 13, 2019

@k8s-ci-robot

This comment has been minimized.

Copy link
Contributor

commented Aug 13, 2019

@boluisa: There are no sig labels on this issue. Please add a sig label by either:

  1. mentioning a sig: @kubernetes/sig-<group-name>-<group-suffix>
    e.g., @kubernetes/sig-contributor-experience-<group-suffix> to notify the contributor experience sig, OR

  2. specifying the label manually: /sig <group-name>
    e.g., /sig scalability to apply the sig/scalability label

Note: Method 1 will trigger an email to the group. See the group list.
The <group-suffix> in method 1 has to be replaced with one of these: bugs, feature-requests, pr-reviews, test-failures, proposals.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

@boluisa boluisa changed the title External CA: Kubeconfig validation fails when using CA bundle External CA: Kubeadm Kubeconfig validation fails when using CA bundle Aug 13, 2019

@boluisa

This comment has been minimized.

Copy link
Author

commented Aug 13, 2019

/sig cluster-lifecyle

@amalts

This comment has been minimized.

Copy link

commented Aug 14, 2019

/assign

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
3 participants
You can’t perform that action at this time.