Kubernetes 客户端 python API 错误 401 - 未经授权

Question

我正在尝试创建一个 Python 客户端来连接并在 AKS 集群上的 pod 中执行命令，但是当尝试连接时，我从客户端收到消息错误 401 Unauthorized。有人在 API 中遇到过此问题吗？API异常消息：kubernetes.client.rest.ApiException: (401)Reason: UnauthorizedHTTP response headers: HTTPHeaderDict({'Audit-Id': 'ba23c2b3-d65b-4200-b802-161300119860', 'Cache-Control': 'no-cache, private', 'Content-Type': 'application/json', 'Date': 'Mon, 21 Sep 2020 18:21:59 GMT', 'Content-Length': '129'})HTTP response body: {"kind":"Status","apiVersion":"v1","metadata":{},"status":"Failure","message":"Unauthorized","reason":"Unauthorized","code":401}Python 客户端 API Kubernetes    from __future__ import print_functionimport timeimport kubernetes.clientimport osfrom kubernetes.stream import streamfrom kubernetes.client.rest import ApiExceptionfrom pprint import pprintname = input("Insira o POD name cadastrado")namespace = input("namespace do POD cadastrado")NomeAtuador = input("Insira o nome do atuador a ser gerado o arquivo de configuração")configuration = kubernetes.client.Configuration()#configuration.verify_ssl=False#configuration.assert_hostname = Falseconfiguration.api_key_prefix['authorization'] = 'Bearer'configuration.api_key['authorization'] = 'MYTOKEN'configuration.ssl_ca_cert= 'PATH TO CA.CRT'configuration.host = "HOST_IP:443"api_instance = kubernetes.client.CoreV1Api(    kubernetes.client.ApiClient(configuration))exec_command = [            '/etc/openvpn/setup/newClientCert.sh',            (NomeAtuador),             'xxxxxxx']resp = stream(api_instance.connect_post_namespaced_pod_exec(    (name), (namespace), command=exec_command,              stderr=True, stdin=True,              stdout=True, tty=True))print("Response: " + resp)我正在使用Python 3.8.2和Kubernetes

Answer 1

为了解决我的问题，我将以下配置添加到集群配置中。

kubectl create clusterrolebinding serviceaccounts-cluster-admin \   --clusterrole=cluster-admin \   --group=system:serviceaccounts