{"action":"created","issue":{"url":"https://api.github.com/repos/kubernetes/kubernetes/issues/14701","repository_url":"https://api.github.com/repos/kubernetes/kubernetes","labels_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/14701/labels{/name}","comments_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/14701/comments","events_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/14701/events","html_url":"https://github.com/kubernetes/kubernetes/issues/14701","id":108777683,"number":14701,"title":"Can kubernetes use basic auth to authenticate kubelet?","user":{"login":"qq690388648","id":13072423,"avatar_url":"https://avatars.githubusercontent.com/u/13072423?v=3","gravatar_id":"","url":"https://api.github.com/users/qq690388648","html_url":"https://github.com/qq690388648","followers_url":"https://api.github.com/users/qq690388648/followers","following_url":"https://api.github.com/users/qq690388648/following{/other_user}","gists_url":"https://api.github.com/users/qq690388648/gists{/gist_id}","starred_url":"https://api.github.com/users/qq690388648/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/qq690388648/subscriptions","organizations_url":"https://api.github.com/users/qq690388648/orgs","repos_url":"https://api.github.com/users/qq690388648/repos","events_url":"https://api.github.com/users/qq690388648/events{/privacy}","received_events_url":"https://api.github.com/users/qq690388648/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/kubernetes/kubernetes/labels/area/auth","name":"area/auth","color":"00cc00"},{"url":"https://api.github.com/repos/kubernetes/kubernetes/labels/priority/P2","name":"priority/P2","color":"fbca04"},{"url":"https://api.github.com/repos/kubernetes/kubernetes/labels/team/node","name":"team/node","color":"d2b48c"}],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":10,"created_at":"2015-09-29T01:28:31Z","updated_at":"2016-10-12T03:36:52Z","closed_at":"2016-10-12T03:36:52Z","body":"The api doc shows:Kubernetes uses client certificates, tokens, or http basic auth to authenticate users for API calls.\r\nSo I tried to use basic auth to authenticate kubelet by set the --kubeconfig as config.yaml which generted by kubectl under ~/.kube/:\r\n```\r\napiVersion: v1\r\nclusters:\r\n- cluster:\r\n    insecure-skip-tls-verify: true\r\n    server: http://master:8080\r\n  name: ubuntu\r\ncontexts:\r\n- context:\r\n    cluster: \"\"\r\n    user: \"\"\r\n  name: development\r\n- context:\r\n    cluster: ubuntu\r\n    user: ubuntu\r\n  name: ubuntu\r\ncurrent-context: ubuntu\r\nkind: Config\r\npreferences: {}\r\nusers:\r\n- name: ubuntu\r\n  user:\r\n    password: wpJjc2rKyCoiP7tb\r\n    username: admin\r\n```\r\nBut it did not work, so I thought whether the kubelet can use basic auth?"},"comment":{"url":"https://api.github.com/repos/kubernetes/kubernetes/issues/comments/253110634","html_url":"https://github.com/kubernetes/kubernetes/issues/14701#issuecomment-253110634","issue_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/14701","id":253110634,"user":{"login":"liggitt","id":980082,"avatar_url":"https://avatars.githubusercontent.com/u/980082?v=3","gravatar_id":"","url":"https://api.github.com/users/liggitt","html_url":"https://github.com/liggitt","followers_url":"https://api.github.com/users/liggitt/followers","following_url":"https://api.github.com/users/liggitt/following{/other_user}","gists_url":"https://api.github.com/users/liggitt/gists{/gist_id}","starred_url":"https://api.github.com/users/liggitt/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/liggitt/subscriptions","organizations_url":"https://api.github.com/users/liggitt/orgs","repos_url":"https://api.github.com/users/liggitt/repos","events_url":"https://api.github.com/users/liggitt/events{/privacy}","received_events_url":"https://api.github.com/users/liggitt/received_events","type":"User","site_admin":false},"created_at":"2016-10-12T03:36:52Z","updated_at":"2016-10-12T03:36:52Z","body":"to summarize, start the kubelet with `--kubeconfig=kubelet.kubeconfig --api-servers=https://master:6443`\r\n\r\nkubelet.kubeconfig:\r\n```\r\napiVersion: v1\r\nclusters:\r\n- cluster:\r\n    insecure-skip-tls-verify: true\r\n    server: https://master:6443\r\n  name: ubuntu\r\ncontexts:\r\n- context:\r\n    cluster: ubuntu\r\n    user: ubuntu\r\n  name: ubuntu\r\ncurrent-context: ubuntu\r\nkind: Config\r\npreferences: {}\r\nusers:\r\n- name: ubuntu\r\n  user:\r\n    password: ...\r\n    username: admin\r\n```"}}
{"actor":{"display_login":"liggitt"}}