解决了

凉爽的GitHub项目：Kubernetes和Nutanix

阿卢西亚尼
UserLevel 7
徽章 +34
Cool GitHub项目-Nutanix的Kubernetes安装工具。尝试一下，并在此论坛中添加您的评论。我敢肯定红魔鬼想听听您的反馈。

在这里下载：https://github.com/nutanix/k8s
图标

最好的答案红魔鬼2017年12月14日，16:22

TehKernel<\/a>thx for feedback. It looks like You deployed k8s on Nutanix cluster and I presume that You can connect to it with kubectl.
\n
\nThe issue is with the web dashboard and is related with the certification management a part of the kubernetes dashboard.
\nYou can find more about that here
\nhttps:\/\/github.com\/kubernetes\/dashboard\/wiki\/Certificate-management<\/a>
\n
\nWe will explain that in the documentation as well.","className":"post__content__best_answer"}">
查看原件
在Twitter上关注我：https：//twitter.com/angeloluciani
该主题已关闭以供评论

17个答复

t
徽章 +5
首先，感谢您发布此信息以使人们意识到红魔鬼呢

我能够完成部署步骤，但是在Ansible Playbook完成并尝试访问仪表板之后，我在浏览器中收到以下错误：

{“ ank”：“ status”，“ apiversion”：“ v1”，“ metadata”：{}，“状态”：“失败”，“ message”：“ forbidden：forbidden：user” kube“ kube”无法获得路径“/ui”“，”原因”：“禁止”，“详细信息”：{}，“代码”：403}我使用说明中列出的用户名和密码。尝试使用任何其他组合只是继续促使我进行身份验证。有什么想法我可能做错了什么？
RedDevil<\/a> !
\n
\nI was able to run through the deployment steps, but after the ansible playbook completes and I attempt to access the dashboard, I recieve the following error in my browser:
\n
\n{ \"kind\": \"Status\", \"apiVersion\": \"v1\", \"metadata\": { }, \"status\": \"Failure\", \"message\": \"forbidden: User \"kube\" cannot get path \"\/ui\"//www.jhbzcj.com/next/karbon-kubernetes-orchestration-30/\", \"reason\": \"Forbidden\", \"details\": { }, \"code\": 403}I am using the username and password listed in the instructions. Attempting to use any other combination just continues to prompt me for authentication. Any ideas what I may be doing wrong?","quoteUsername":"TehKernel","translations":{"Common":{"like":"Like","unlike":"Unlike"},"Forum":{"Quote":"Quote","Share":"Share"}}}">
r
徽章 +3
TehkernelTHX表示反馈。看起来您在Nutanix群集上部署了K8，我认为您可以与Kubectl连接。

问题与Web仪表板有关，与Certification Management是Kubernetes仪表板的一部分有关。
您可以在这里找到更多有关此的信息
https://github.com/kubernetes/dashboard/wiki/certificate-management

我们也将在文档中解释这一点。
TehKernel<\/a>thx for feedback. It looks like You deployed k8s on Nutanix cluster and I presume that You can connect to it with kubectl.
\n
\nThe issue is with the web dashboard and is related with the certification management a part of the kubernetes dashboard.
\nYou can find more about that here
\nhttps:\/\/github.com\/kubernetes\/dashboard\/wiki\/Certificate-management<\/a>
\n
\nWe will explain that in the documentation as well.","quoteUsername":"RedDevil","translations":{"Common":{"like":"Like","unlike":"Unlike"},"Forum":{"Quote":"Quote","Share":"Share"}}}">
t
徽章 +5
红魔鬼感谢您的后续行动。我确实能够使用kubectl连接，看来初始部署进行得很好。

我会在证书件上阅读。谢谢！
RedDevil<\/a> Thanks for the follow-up. I was indeed able to connect using kubectl, and it appears the initial deployment went well.
\n
\nI'll read up on the certificate piece. Thanks!","quoteUsername":"TehKernel","translations":{"Common":{"like":"Like","unlike":"Unlike"},"Forum":{"Quote":"Quote","Share":"Share"}}}">
p
徽章 +1
Tehkernel在.kubespray/工件在哪里admin.conf放置运行：

CAT Admin.Conf |GREP证书授权数据|awk'{print $ 2}'|base64 - decode> ca.pemcat admin.conf |GREP客户端认证数据|awk'{print $ 2}'|base64 - decode> k8s_crt.pemcat admin.conf |GREP CLIENT-KEY-DATA |awk'{print $ 2}'|base64 -decode> k8s_key.pemopenssl pkcs12 -export -Out k8s_crt.pfx -inkey k8s_key.pem.pem -in k8s_crt.pem -certfile -certfile ca.pem
然后在浏览器中导入k8s_crt.pfx。
TehKernel<\/a> in .kubespray\/artifacts<\/b> where admin.conf<\/b> is placed run:
\n
\ncat admin.conf | grep certificate-authority-data | awk '{print $2}' | base64 --decode > ca.pemcat admin.conf | grep client-certificate-data | awk '{print $2}' | base64 --decode > k8s_crt.pemcat admin.conf | grep client-key-data | awk '{print $2}' | base64 --decode > k8s_key.pemopenssl pkcs12 -export -out k8s_crt.pfx -inkey k8s_key.pem -in k8s_crt.pem -certfile ca.pem
\nand then import k8s_crt.pfx in your browser.","quoteUsername":"pskrzyns","translations":{"Common":{"like":"Like","unlike":"Unlike"},"Forum":{"Quote":"Quote","Share":"Share"}}}">
t
徽章 +5
那很完美。运行这些命令并导入证书后，我能够将仪表板加载。我永远不会自己弄清楚。:)

谢谢红魔鬼
r
徽章 +3
Tehkernel我很高兴一切正常。请注意这个项目，很快我们将介绍新的功能。
TehKernel<\/a> I'm glad that everything is working properly.Keep an eye on this project, soon we will introduce new functionality.","quoteUsername":"RedDevil","translations":{"Common":{"like":"Like","unlike":"Unlike"},"Forum":{"Quote":"Quote","Share":"Share"}}}">
m
徽章
嘿，您是如何解决Nutanix叠加网络以部署Kubernetes的问题的？
t
徽章 +5
我还没有时间进入网络或任何东西。我只是让安装程序运行并能够访问仪表板有问题。我只有时间尝试一些基本的供应，这给了我一些合适的措施，但是我没有时间研究正在发生的事情或原因。对不起。
p
徽章 +1
巫术默认情况下，安装程序使用法兰绒来设置覆盖网络
对于Kubernetes服务，它将使用
10.233.0.0/18和Pods
10.233.64.0/18
mesumanth<\/a> Installer by default is using flannel to setup overlay network
\nFor kubernetes services it will use
\n10.233.0.0\/18and for pods
\n10.233.64.0\/18","quoteUsername":"pskrzyns","translations":{"Common":{"like":"Like","unlike":"Unlike"},"Forum":{"Quote":"Quote","Share":"Share"}}}">
p
徽章 +1
巫术默认情况下，安装程序正在安装法兰绒来创建覆盖网络。
对于Kubernetes服务，它将使用10.233.0.0/18和豆荚10.233.64.0/18。
mesumanth<\/a> Installer by default is installing flannel to create overlay network.
\nFor kubernetes services it will use 10.233.0.0\/18<\/b> and for pods 10.233.64.0\/18<\/b>.","quoteUsername":"pskrzyns","translations":{"Common":{"like":"Like","unlike":"Unlike"},"Forum":{"Quote":"Quote","Share":"Share"}}}">
r
徽章 +3
@Mesumanth默认情况下，安装程序使用法兰绒来设置覆盖网络
@mesumanth<\/a> Installer by default is using flannel to setup overlay network","quoteUsername":"RedDevil","translations":{"Common":{"like":"Like","unlike":"Unlike"},"Forum":{"Quote":"Quote","Share":"Share"}}}">
s
徽章
看起来存储库是离线拉出的。这个项目还活着吗？
阿卢西亚尼
UserLevel 7
徽章 +34
感谢您指出了这一点 @smoodo

你有替代链接吗 @红魔鬼
在Twitter上关注我：https：//twitter.com/angeloluciani
@smoodo<\/user-mention>
\r\n
\r\nDo you have an alternative link @RedDevil<\/user-mention>","quoteUsername":"aluciani","translations":{"Common":{"like":"Like","unlike":"Unlike"},"Forum":{"Quote":"Quote","Share":"Share"}}}">
r
徽章 +3
存储库被拉下，我们没有其他选择。
阿卢西亚尼
UserLevel 7
徽章 +34
你好 @smoodo存储库被取下 - 请继续关注一些有趣的更新。
在Twitter上关注我：https：//twitter.com/angeloluciani
@smoodo<\/user-mention> The repository was pulled down - stay tuned for some interesting updates.","quoteUsername":"aluciani","translations":{"Common":{"like":"Like","unlike":"Unlike"},"Forum":{"Quote":"Quote","Share":"Share"}}}">
西顿
UserLevel 2
徽章 +13
我自己寻找这个，有什么更新吗？

谢谢
\r\n
\r\nThanks","quoteUsername":"seaton","translations":{"Common":{"like":"Like","unlike":"Unlike"},"Forum":{"Quote":"Quote","Share":"Share"}}}">
r
徽章 +3
@seaton抱歉，没有新的更新
@seaton<\/user-mention> sorry, no new update","quoteUsername":"RedDevil","translations":{"Common":{"like":"Like","unlike":"Unlike"},"Forum":{"Quote":"Quote","Share":"Share"}}}">
Learn more about our cookies.<\/a>","cookiepolicy.button":"Accept cookies","cookiepolicy.button.deny":"Deny all","cookiepolicy.link":"Cookie settings","cookiepolicy.modal.title":"Cookie settings","cookiepolicy.modal.content":"We use 3 different kinds of cookies. You can choose which cookies you want to accept. We need basic cookies to make this site work, therefore these are the minimum you can select. Learn more about our cookies.<\/a>","cookiepolicy.modal.level1":"Basic
Functional","cookiepolicy.modal.level2":"Normal
Functional + analytics","cookiepolicy.modal.level3":"Complete
Functional + analytics + social media + embedded videos"}}}">
Baidu