Mixing
Accessing Kubernetes / Kubernetes API using KubernetesDotNet
I'm running a webAPI application that is actually using KubernetesDotNet [or other clients] to connect to a remote Kubernetes cluster API.
Locally is working, but once I publish in the server I started receiving
The underlying connection was closed: Could not establish trust
relationship for the SSL/TLS secure channel
The connection is stablished reading a .pfx file.
IKubernetesClient k8sClient = new SslClientConfiguration
{
ClusterUri = new Uri(
"https://remotekubernetes.hcp.eastus.azmk8s.io"),
Certificate = new X509Certificate2(
HostingEnvironment.ApplicationPhysicalPath + "certificate.pfx",
"12345608765422",
X509KeyStorageFlags.UserKeySet)
}.CreateClient( AuthType.SSLAuth);
That cert I get it using the .kube/config file information, nevertheless I have also tested locally this
IKubernetesClient k8sClient = new KubeConfigClientConfiguration(
HostingEnvironment.ApplicationPhysicalPath + "config"
).CreateClient(AuthType.SSLAuth);
Accessing a copy of the .kube/config and is also working fine.
The thing is that once I publish the webApi application I start receiving the SSL errors.
How to fix this?
ssl asp.net-web-api
kubernetes x509certificate kubernetes-security edited Jan 1 at 11:40
Cœur
18.7k9110150
asked Aug 31 '18 at 2:02
JuanKJuanK
1,8091429
add a comment |
I'm running a webAPI application that is actually using KubernetesDotNet [or other clients] to connect to a remote Kubernetes cluster API.
Locally is working, but once I publish in the server I started receiving
The underlying connection was closed: Could not establish trust
relationship for the SSL/TLS secure channel
The connection is stablished reading a .pfx file.
IKubernetesClient k8sClient = new SslClientConfiguration
{
ClusterUri = new Uri(
"https://remotekubernetes.hcp.eastus.azmk8s.io"),
Certificate = new X509Certificate2(
HostingEnvironment.ApplicationPhysicalPath + "certificate.pfx",
"12345608765422",
X509KeyStorageFlags.UserKeySet)
}.CreateClient( AuthType.SSLAuth);
That cert I get it using the .kube/config file information, nevertheless I have also tested locally this
IKubernetesClient k8sClient = new KubeConfigClientConfiguration(
HostingEnvironment.ApplicationPhysicalPath + "config"
).CreateClient(AuthType.SSLAuth);
Accessing a copy of the .kube/config and is also working fine.
The thing is that once I publish the webApi application I start receiving the SSL errors.
How to fix this?
ssl asp.net-web-api
kubernetes x509certificate kubernetes-security edited Jan 1 at 11:40
Cœur
18.7k9110150
asked Aug 31 '18 at 2:02
JuanKJuanK
1,8091429
Sounds like a CA, cert issue. What ca.pem or ca are you using in your server app?
– Rico
Sep 12 '18 at 22:04
I'm converting the certs to .cer and .pfx files that are the supported file types for an Azure App Service.
– JuanK
Sep 13 '18 at 2:51
Yeah but does kubernetes support that format? you are connecting to the kube-apiserver...
– Rico
Sep 13 '18 at 2:58
Running the webapp in a local development server + remote kubernetes is working. Same app + certs, same remote kubernetes but webApp in server /azure websiteL it doesn't.
– JuanK
Sep 13 '18 at 3:54
add a comment |
I'm running a webAPI application that is actually using KubernetesDotNet [or other clients] to connect to a remote Kubernetes cluster API.
Locally is working, but once I publish in the server I started receiving
The underlying connection was closed: Could not establish trust
relationship for the SSL/TLS secure channel
The connection is stablished reading a .pfx file.
IKubernetesClient k8sClient = new SslClientConfiguration
{
ClusterUri = new Uri(
"https://remotekubernetes.hcp.eastus.azmk8s.io"),
Certificate = new X509Certificate2(
HostingEnvironment.ApplicationPhysicalPath + "certificate.pfx",
"12345608765422",
X509KeyStorageFlags.UserKeySet)
}.CreateClient( AuthType.SSLAuth);
That cert I get it using the .kube/config file information, nevertheless I have also tested locally this
IKubernetesClient k8sClient = new KubeConfigClientConfiguration(
HostingEnvironment.ApplicationPhysicalPath + "config"
).CreateClient(AuthType.SSLAuth);
Accessing a copy of the .kube/config and is also working fine.
The thing is that once I publish the webApi application I start receiving the SSL errors.
How to fix this?
ssl asp.net-web-api
kubernetes x509certificate kubernetes-security edited Jan 1 at 11:40
Cœur
18.7k9110150
asked Aug 31 '18 at 2:02
JuanKJuanK
1,8091429
I'm running a webAPI application that is actually using KubernetesDotNet [or other clients] to connect to a remote Kubernetes cluster API.
Locally is working, but once I publish in the server I started receiving
The underlying connection was closed: Could not establish trust
relationship for the SSL/TLS secure channel
The connection is stablished reading a .pfx file.
IKubernetesClient k8sClient = new SslClientConfiguration
{
ClusterUri = new Uri(
"https://remotekubernetes.hcp.eastus.azmk8s.io"),
Certificate = new X509Certificate2(
HostingEnvironment.ApplicationPhysicalPath + "certificate.pfx",
"12345608765422",
X509KeyStorageFlags.UserKeySet)
}.CreateClient( AuthType.SSLAuth);
That cert I get it using the .kube/config file information, nevertheless I have also tested locally this
IKubernetesClient k8sClient = new KubeConfigClientConfiguration(
HostingEnvironment.ApplicationPhysicalPath + "config"
).CreateClient(AuthType.SSLAuth);
Accessing a copy of the .kube/config and is also working fine.
The thing is that once I publish the webApi application I start receiving the SSL errors.
How to fix this?
ssl asp.net-web-api
kubernetes x509certificate kubernetes-security ssl asp.net-web-api
kubernetes x509certificate kubernetes-security edited Jan 1 at 11:40
Cœur
18.7k9110150
asked Aug 31 '18 at 2:02
JuanKJuanK
1,8091429
edited Jan 1 at 11:40
Cœur
18.7k9110150
asked Aug 31 '18 at 2:02
JuanKJuanK
1,8091429
edited Jan 1 at 11:40
Cœur
18.7k9110150
edited Jan 1 at 11:40
Cœur
18.7k9110150
edited Jan 1 at 11:40
Cœur
18.7k9110150
18.7k9110150
asked Aug 31 '18 at 2:02
JuanKJuanK
1,8091429
asked Aug 31 '18 at 2:02
JuanKJuanK
1,8091429
asked Aug 31 '18 at 2:02
JuanKJuanK
1,8091429
1,8091429
Sounds like a CA, cert issue. What ca.pem or ca are you using in your server app?
– Rico
Sep 12 '18 at 22:04
I'm converting the certs to .cer and .pfx files that are the supported file types for an Azure App Service.
– JuanK
Sep 13 '18 at 2:51
Yeah but does kubernetes support that format? you are connecting to the kube-apiserver...
– Rico
Sep 13 '18 at 2:58
Running the webapp in a local development server + remote kubernetes is working. Same app + certs, same remote kubernetes but webApp in server /azure websiteL it doesn't.
– JuanK
Sep 13 '18 at 3:54
add a comment |
Sounds like a CA, cert issue. What ca.pem or ca are you using in your server app?
– Rico
Sep 12 '18 at 22:04
I'm converting the certs to .cer and .pfx files that are the supported file types for an Azure App Service.
– JuanK
Sep 13 '18 at 2:51
Yeah but does kubernetes support that format? you are connecting to the kube-apiserver...
– Rico
Sep 13 '18 at 2:58
Running the webapp in a local development server + remote kubernetes is working. Same app + certs, same remote kubernetes but webApp in server /azure websiteL it doesn't.
– JuanK
Sep 13 '18 at 3:54
Sounds like a CA, cert issue. What ca.pem or ca are you using in your server app?
– Rico
Sep 12 '18 at 22:04
Sounds like a CA, cert issue. What ca.pem or ca are you using in your server app?
– Rico
Sep 12 '18 at 22:04
I'm converting the certs to .cer and .pfx files that are the supported file types for an Azure App Service.
– JuanK
Sep 13 '18 at 2:51
I'm converting the certs to .cer and .pfx files that are the supported file types for an Azure App Service.
– JuanK
Sep 13 '18 at 2:51
Yeah but does kubernetes support that format? you are connecting to the kube-apiserver...
– Rico
Sep 13 '18 at 2:58
Yeah but does kubernetes support that format? you are connecting to the kube-apiserver...
– Rico
Sep 13 '18 at 2:58
Running the webapp in a local development server + remote kubernetes is working. Same app + certs, same remote kubernetes but webApp in server /azure websiteL it doesn't.
– JuanK
Sep 13 '18 at 3:54
Running the webapp in a local development server + remote kubernetes is working. Same app + certs, same remote kubernetes but webApp in server /azure websiteL it doesn't.
– JuanK
Sep 13 '18 at 3:54
add a comment |
0
active
oldest
votes
Your Answer
StackExchange.ifUsing("editor", function () {
StackExchange.using("externalEditor", function () {
StackExchange.using("snippets", function () {
StackExchange.snippets.init();
});
});
}, "code-snippets");
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "1"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f52107523%2faccessing-kubernetes-kubernetes-api-using-kubernetesdotnet%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
0
active
oldest
votes
0
active
oldest
votes
active
oldest
votes
active
oldest
votes
Thanks for contributing an answer to Stack Overflow!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f52107523%2faccessing-kubernetes-kubernetes-api-using-kubernetesdotnet%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Sounds like a CA, cert issue. What ca.pem or ca are you using in your server app?
– Rico
Sep 12 '18 at 22:04
I'm converting the certs to .cer and .pfx files that are the supported file types for an Azure App Service.
– JuanK
Sep 13 '18 at 2:51
Yeah but does kubernetes support that format? you are connecting to the kube-apiserver...
– Rico
Sep 13 '18 at 2:58
Running the webapp in a local development server + remote kubernetes is working. Same app + certs, same remote kubernetes but webApp in server /azure websiteL it doesn't.
– JuanK
Sep 13 '18 at 3:54