-
Notifications
You must be signed in to change notification settings - Fork 37
Open
Description
When using the Get Namespaced Pod Exec keywork on a k8s cluster using a custom CA, the following error occurs :
ssl.SSLCertVerificationError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get issuer certificate (_ssl.c:1129)
Other keywords (Read Namespaced Pod Status, List Namespaced Pod By Pattern ...) are working as expected.
As a quick fix, I'm adding the following line in the _add_api method of the library :
def _add_api(self, reference, class_name):
self.__dict__[reference] = class_name(self.api_client)
if not self.cert_validation:
self.__dict__[reference].api_client.rest_client.pool_manager.connection_pool_kw['cert_reqs'] = ssl.CERT_NONE
self.__dict__[reference].api_client.configuration.verify_ssl = False
Am I missing something regarding the library configuration ?
Versions :
KubeLibrary: 0.8.0
Python: 3.9.13
Kubernetes: 1.24
KubeLibrary :
Library KubeLibrary kube_config=${KUBECONFIG_FILE} cert_validation=False
KubeLibrary.Get Namespaced Pod Exec
... name=my-pod
... namespace=${namespace}
... argv_cmd=${command}
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
No labels