{"action":"created","issue":{"url":"https://api.github.com/repos/brancz/kube-rbac-proxy/issues/11","repository_url":"https://api.github.com/repos/brancz/kube-rbac-proxy","labels_url":"https://api.github.com/repos/brancz/kube-rbac-proxy/issues/11/labels{/name}","comments_url":"https://api.github.com/repos/brancz/kube-rbac-proxy/issues/11/comments","events_url":"https://api.github.com/repos/brancz/kube-rbac-proxy/issues/11/events","html_url":"https://github.com/brancz/kube-rbac-proxy/issues/11","id":333885173,"node_id":"MDU6SXNzdWUzMzM4ODUxNzM=","number":11,"title":"x509 - cannot parse dnsName","user":{"login":"markeijsermans","id":1326506,"node_id":"MDQ6VXNlcjEzMjY1MDY=","avatar_url":"https://avatars2.githubusercontent.com/u/1326506?v=4","gravatar_id":"","url":"https://api.github.com/users/markeijsermans","html_url":"https://github.com/markeijsermans","followers_url":"https://api.github.com/users/markeijsermans/followers","following_url":"https://api.github.com/users/markeijsermans/following{/other_user}","gists_url":"https://api.github.com/users/markeijsermans/gists{/gist_id}","starred_url":"https://api.github.com/users/markeijsermans/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/markeijsermans/subscriptions","organizations_url":"https://api.github.com/users/markeijsermans/orgs","repos_url":"https://api.github.com/users/markeijsermans/repos","events_url":"https://api.github.com/users/markeijsermans/events{/privacy}","received_events_url":"https://api.github.com/users/markeijsermans/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-06-20T00:35:06Z","updated_at":"2018-06-20T07:48:09Z","closed_at":null,"author_association":"NONE","body":"The current version v0.3.0 on [quay.io](https://quay.io/repository/coreos/kube-rbac-proxy?tag=latest&tab=tags) is compiled with a version of golang that is causing issues with intermediary certs. This effects people running prometheus-operator from the [generated manifests](https://github.com/coreos/prometheus-operator/tree/master/contrib/kube-prometheus/manifests)\r\n\r\nLogs from the proxy running in a `node-exporter` pod:\r\n```\r\nconfig.go:330] Expected to load root CA config from /var/run/secrets/kubernetes.io/serviceaccount/ca.crt, but got err: error reading /var/run/secrets/kubernetes.io/serviceaccount/ca.crt: x509: cannot parse dnsName \"Self-Signed Root CA for all Dev Kubernetes Clusters\"\r\n```\r\n\r\nThe golang issue: https://github.com/golang/go/issues/23995#issuecomment-368784560\r\n\r\nAs a result Kubernetes go client has experienced these issues: https://github.com/kubernetes/client-go/issues/371. \r\n\r\nI can confirm rebuilding `kube-rbac-proxy` with `make container` (now using go v1.10.3) fixes the issue.\r\n\r\nTested on Kubernetes version:\r\n```\r\nServer Version: version.Info{Major:\"1\", Minor:\"10\", GitVersion:\"v1.10.3\", GitCommit:\"2bba0127d85d5a46ab4b778548be28623b32d0b0\", GitTreeState:\"clean\", BuildDate:\"2018-05-21T09:05:37Z\", GoVersion:\"go1.9.3\", Compiler:\"gc\", Platform:\"linux/amd64\"}\r\n```\r\n"},"comment":{"url":"https://api.github.com/repos/brancz/kube-rbac-proxy/issues/comments/398656920","html_url":"https://github.com/brancz/kube-rbac-proxy/issues/11#issuecomment-398656920","issue_url":"https://api.github.com/repos/brancz/kube-rbac-proxy/issues/11","id":398656920,"node_id":"MDEyOklzc3VlQ29tbWVudDM5ODY1NjkyMA==","user":{"login":"brancz","id":4546722,"node_id":"MDQ6VXNlcjQ1NDY3MjI=","avatar_url":"https://avatars3.githubusercontent.com/u/4546722?v=4","gravatar_id":"","url":"https://api.github.com/users/brancz","html_url":"https://github.com/brancz","followers_url":"https://api.github.com/users/brancz/followers","following_url":"https://api.github.com/users/brancz/following{/other_user}","gists_url":"https://api.github.com/users/brancz/gists{/gist_id}","starred_url":"https://api.github.com/users/brancz/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/brancz/subscriptions","organizations_url":"https://api.github.com/users/brancz/orgs","repos_url":"https://api.github.com/users/brancz/repos","events_url":"https://api.github.com/users/brancz/events{/privacy}","received_events_url":"https://api.github.com/users/brancz/received_events","type":"User","site_admin":false},"created_at":"2018-06-20T07:48:09Z","updated_at":"2018-06-20T07:48:09Z","author_association":"OWNER","body":"Thanks for this issue! I will re-compile and release a new version to get this fixed."}}
{"actor":{"display_login":"brancz"}}