无法使用公共FQDN在ACC中添加内部可访问的K8s集群
适用场景
- Asta控制中心(ACC) 23.07
- Kubbernetes集群(例如OpenShift NVM1)
问题描述
尝试使用外部名称添加内部K8s集群时、出现以下错误:
- 在复合计算模块中、有两个事件:
failed to add cluster
""、下一条消息为错误- 单独事件:
type:https://astra.netapp.io/problems/63, title:Kubeconfig not valid, description:The provided credential can't connect to the cluster. Provide an updated credential and retry the request., status:400, schema_validation_failure:, invalid_params:[], invalid_fields:[]
""
- 在三元服务模块中:
- 事件:
errors - error handler - Invalid cluster credentials for provided ID." with error: "could not initialize Kubernetes client; couldn't retrieve API server's version: Get \"https://api-int.<CLUSTER-FQDN>:6443/version\": x509: certificate signed by unknown authority
""
- 事件:
即使在"cluster-(集群)"下的kubeconfig"中添加以下行、也会出现这些错误(尤其是X509错误):
insecure-skip-tls-verify: true