Skip to content

Built-in certificates for kube.vmdk do not contain bootstrap.saltstack.com #2295

Closed
@benjsmi

Description

@benjsmi

https://github.com/GoogleCloudPlatform/kubernetes/blob/master/cluster/vsphere/templates/salt-master.sh#L53

When wgetting to this address during the installation process, this just fails silently. Turns out the issue is that if you take a raw kube.vmdk and curl that address you get a TLS error. I've fixed it by changing https://bootstrap.saltstack.com to http://bootstrap.saltstack.com, but obviously that's more risky.

Activity

jbeda

jbeda commented on Nov 11, 2014

@jbeda
Contributor

Related (filed after an email exchange around wget) saltstack/salt-bootstrap#491

I don't have easy access to the vSphere kube.vmdk so I can't verify how it relates to my debian install.

benjsmi

benjsmi commented on Nov 11, 2014

@benjsmi
Author

Yes, that is exactly the error I was experiencing.

jbeda

jbeda commented on Nov 11, 2014

@jbeda
Contributor

@programsam Does curl work? Or is it busted too?

pietern

pietern commented on Nov 11, 2014

@pietern

Curl is not installed on the image by default. I'm building a new image based on Debian 7.7 where I pull in curl by default, so we can switch to using that everywhere (instead of an awkward mix of wget and curl).

pietern

pietern commented on Nov 12, 2014

@pietern

Thanks for reporting this @programsam, I hadn't seen this yet. I uploaded a new VMDK that includes curl and updated the deployment scripts to use curl. I verified that deployment works again for me.

added a commit that references this issue on Nov 12, 2014
1df6f9c
benjsmi

benjsmi commented on Nov 12, 2014

@benjsmi
Author

I can confirm that this works now with latest build from master on ESX. Probably still won't work with v0.4.3 (even w new image) since the scripts still used wget back then.

jbeda

jbeda commented on Nov 12, 2014

@jbeda
Contributor

We are probably going to fork for v0.5 soon. But I can backport if this
trips folks up.

sent from tiny keyboard
On Nov 12, 2014 9:09 AM, "Ben Smith" notifications@github.com wrote:

I can confirm that this works now with latest build from master on ESX.
Probably still won't work with v0.4.3 (even w new image) since the scripts
still used wget back then.


Reply to this email directly or view it on GitHub
#2295 (comment)
.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions

      Built-in certificates for kube.vmdk do not contain bootstrap.saltstack.com · Issue #2295 · kubernetes/kubernetes