Styjun

Why were there so many icicles in this Space Shuttle launch area? (Challenger disaster)

When Conservative MPs lose the whip, do they retain the right to vote in leadership elections?

Friend is very nitpicky about side comments I don't intend to be taken too seriously

How should Thaumaturgy's "three times as loud as normal" be interpreted?

How strong is aircraft-grade spruce?

How to convert P2O5 concentration to H3PO4 concentration?

How is the phase of 120V AC established in a North American home?

Protecting programs on external drives with the same priviledges as in Program Files

How to restrain your dragon?

Furthest distance half the diameter?

Schrodinger's Cat Isn't Meant To Be Taken Seriously, Right?

Supervisor wants me to support a diploma-thesis SW tool after I graduated

Python implementation of atoi

Bit floating sequence

Did the Byzantines ever attempt to move their capital to Rome?

How to improvise or make pot grip / pot handle

Project Euler problem #112

Would scoring well on a non-required GRE Mathematics Subject Test make me more competitive?

When does order matter in probability?

Proof for integral representation of Lambert W function

Why are UK MPs allowed to abstain (but it counts as a no)?

What's the biggest difference between these two photos?

Leaving the USA for 10 yrs when you have asylum

Why are some hotels asking you to book through Booking.com instead of matching the price at the front desk?

Kubernetes Dashboard does not accept service account's token over HTTP: Authentication failed. Please try again

issue on arm64: no endpoints,code:503unable to access kubernetes dashboard via tokenwhich token to use for kubernetes-dashboard login with Google cloud platformKubernetes dashboard pods is not runningNot able to access minikube dashboardKubernetes Dashboard v1.8.3 deploymentK8s Dashboard not logging in (k8s version 1.11)kubernetes-dashboard exposing through istio [1.0.0] ingress --istio-ingressgatewayHow to access Kubernetes Dashboard from outside networkKubernetes Dashboard - How to lock down 8080 access

.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty margin-bottom:0;

1

I have installed Kubernetes Dashboard on a Kubernetes 1.13 cluster as described here:

kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/v1.10.1/src/deploy/recommended/kubernetes-dashboard.yaml

I've also configured the dashboard to serve its content insecurely because I want to expose it via an Ingress at https://my-cluster/dashboard where the TLS connection will be terminated at the ingress controller.

• I have edited service/kubernetes-dashboard in namespace kube-system and changed ports from port:443, targetPort:8443 to port:80, protocol:TCP, targetPort:9090.


• I have edited deployment/kubernetes-dashboard in namespace kube-system and changed
  ports from containerPort: 8443, protocol:TCP to containerPort: 9090, protocol:TCP (and livenessProbe analagously). I have also changed args from [ --auto-generate-certificates ] to [ --enable-insecure-login ].

This allows me to contact the dashboard from a cluster node via HTTP at the service's cluster IP address and port 80 (no Ingress is configured yet).

I have also created a sample user as explained here and extracted its token. The token works e.g. in kubectl --token $token get pod --all-namespaces, so it apparently possesses cluster-admin privileges. However, if I enter the same token into the dashboards' login screen I get "Authentication failed. Please try again.".

What could be the reason why? How can I further diagnose and solve the issue? (The dashboard's log does not provide any help at this point.)

UPDATE If I keep the dashboard's standard configuration (i.e. for secure access over HTTPS) the same token is accepted.

kubernetes kubernetes-dashboard

share|improve this question

edited Mar 28 at 6:17

Eduardo Baitello

1,81333 gold badges1111 silver badges2727 bronze badges

asked Mar 27 at 12:46

rookie099rookie099

65311 silver badge1212 bronze badges

add a comment | 

1

I have installed Kubernetes Dashboard on a Kubernetes 1.13 cluster as described here:

kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/v1.10.1/src/deploy/recommended/kubernetes-dashboard.yaml

I've also configured the dashboard to serve its content insecurely because I want to expose it via an Ingress at https://my-cluster/dashboard where the TLS connection will be terminated at the ingress controller.

• I have edited service/kubernetes-dashboard in namespace kube-system and changed ports from port:443, targetPort:8443 to port:80, protocol:TCP, targetPort:9090.


• I have edited deployment/kubernetes-dashboard in namespace kube-system and changed
  ports from containerPort: 8443, protocol:TCP to containerPort: 9090, protocol:TCP (and livenessProbe analagously). I have also changed args from [ --auto-generate-certificates ] to [ --enable-insecure-login ].

This allows me to contact the dashboard from a cluster node via HTTP at the service's cluster IP address and port 80 (no Ingress is configured yet).

I have also created a sample user as explained here and extracted its token. The token works e.g. in kubectl --token $token get pod --all-namespaces, so it apparently possesses cluster-admin privileges. However, if I enter the same token into the dashboards' login screen I get "Authentication failed. Please try again.".

What could be the reason why? How can I further diagnose and solve the issue? (The dashboard's log does not provide any help at this point.)

UPDATE If I keep the dashboard's standard configuration (i.e. for secure access over HTTPS) the same token is accepted.

kubernetes kubernetes-dashboard

share|improve this question

edited Mar 28 at 6:17

Eduardo Baitello

1,81333 gold badges1111 silver badges2727 bronze badges

asked Mar 27 at 12:46

rookie099rookie099

65311 silver badge1212 bronze badges

add a comment | 

I have installed Kubernetes Dashboard on a Kubernetes 1.13 cluster as described here:

kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/v1.10.1/src/deploy/recommended/kubernetes-dashboard.yaml

I've also configured the dashboard to serve its content insecurely because I want to expose it via an Ingress at https://my-cluster/dashboard where the TLS connection will be terminated at the ingress controller.

• I have edited service/kubernetes-dashboard in namespace kube-system and changed ports from port:443, targetPort:8443 to port:80, protocol:TCP, targetPort:9090.


• I have edited deployment/kubernetes-dashboard in namespace kube-system and changed
  ports from containerPort: 8443, protocol:TCP to containerPort: 9090, protocol:TCP (and livenessProbe analagously). I have also changed args from [ --auto-generate-certificates ] to [ --enable-insecure-login ].

This allows me to contact the dashboard from a cluster node via HTTP at the service's cluster IP address and port 80 (no Ingress is configured yet).

I have also created a sample user as explained here and extracted its token. The token works e.g. in kubectl --token $token get pod --all-namespaces, so it apparently possesses cluster-admin privileges. However, if I enter the same token into the dashboards' login screen I get "Authentication failed. Please try again.".

What could be the reason why? How can I further diagnose and solve the issue? (The dashboard's log does not provide any help at this point.)

UPDATE If I keep the dashboard's standard configuration (i.e. for secure access over HTTPS) the same token is accepted.

kubernetes kubernetes-dashboard

share|improve this question

edited Mar 28 at 6:17

Eduardo Baitello

1,81333 gold badges1111 silver badges2727 bronze badges

asked Mar 27 at 12:46

rookie099rookie099

65311 silver badge1212 bronze badges

kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/v1.10.1/src/deploy/recommended/kubernetes-dashboard.yaml

kubernetes kubernetes-dashboard

kubernetes kubernetes-dashboard

share|improve this question

edited Mar 28 at 6:17

Eduardo Baitello

1,81333 gold badges1111 silver badges2727 bronze badges

asked Mar 27 at 12:46

rookie099rookie099

65311 silver badge1212 bronze badges

share|improve this question

edited Mar 28 at 6:17

Eduardo Baitello

1,81333 gold badges1111 silver badges2727 bronze badges

asked Mar 27 at 12:46

rookie099rookie099

65311 silver badge1212 bronze badges

edited Mar 28 at 6:17

Eduardo Baitello

1,81333 gold badges1111 silver badges2727 bronze badges

edited Mar 28 at 6:17

Eduardo Baitello

1,81333 gold badges1111 silver badges2727 bronze badges

asked Mar 27 at 12:46

rookie099rookie099

65311 silver badge1212 bronze badges

asked Mar 27 at 12:46

rookie099rookie099

65311 silver badge1212 bronze badges