Connecting to Kubernetes API from pod

1/8/2019

I'm trying to use Kubernetes API from inside a pod. Going to list/watch pods and custom defined resources.

Construct url as "https://KUBERNETES_SERVICE_HOST:KUBERNETES_SERVICE_PORT_HTTPS" Authorization header = "Bearer /var/run/secrets/kubernetes.io/serviceaccount/token" CaCert = /var/run/secrets/kubernetes.io/serviceaccount/ca.crt

When running inside minikube, the request fails with "Error: connect ETIMEDOUT 10.96.0.1:443" Same code running in GCP fails with: "Error: unable to verify the first certificate"

-- rubenhak
api
kubernetes
kubernetes-apiserver

1 Answer

9/11/2019

If you are using curl, you can skip certificate checks with the -k flag.

Try

curl -k  https://10.96.0.1:443/api/v1/namespaces -H "Authorization: Bearer <content of /var/run/secrets/kubernetes.io/serviceaccount/token here>"
-- Sam
Source: StackOverflow