{"action":"created","issue":{"url":"https://api.github.com/repos/GoogleCloudPlatform/kubernetes/issues/8314","labels_url":"https://api.github.com/repos/GoogleCloudPlatform/kubernetes/issues/8314/labels{/name}","comments_url":"https://api.github.com/repos/GoogleCloudPlatform/kubernetes/issues/8314/comments","events_url":"https://api.github.com/repos/GoogleCloudPlatform/kubernetes/issues/8314/events","html_url":"https://github.com/GoogleCloudPlatform/kubernetes/issues/8314","id":76719419,"number":8314,"title":"kube2sky cannot connect to apiserver","user":{"login":"ArtfulCoder","id":1220660,"avatar_url":"https://avatars.githubusercontent.com/u/1220660?v=3","gravatar_id":"","url":"https://api.github.com/users/ArtfulCoder","html_url":"https://github.com/ArtfulCoder","followers_url":"https://api.github.com/users/ArtfulCoder/followers","following_url":"https://api.github.com/users/ArtfulCoder/following{/other_user}","gists_url":"https://api.github.com/users/ArtfulCoder/gists{/gist_id}","starred_url":"https://api.github.com/users/ArtfulCoder/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ArtfulCoder/subscriptions","organizations_url":"https://api.github.com/users/ArtfulCoder/orgs","repos_url":"https://api.github.com/users/ArtfulCoder/repos","events_url":"https://api.github.com/users/ArtfulCoder/events{/privacy}","received_events_url":"https://api.github.com/users/ArtfulCoder/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/GoogleCloudPlatform/kubernetes/labels/area/networking","name":"area/networking","color":"006b75"},{"url":"https://api.github.com/repos/GoogleCloudPlatform/kubernetes/labels/team/node","name":"team/node","color":"d2b48c"}],"state":"open","locked":false,"assignee":{"login":"ArtfulCoder","id":1220660,"avatar_url":"https://avatars.githubusercontent.com/u/1220660?v=3","gravatar_id":"","url":"https://api.github.com/users/ArtfulCoder","html_url":"https://github.com/ArtfulCoder","followers_url":"https://api.github.com/users/ArtfulCoder/followers","following_url":"https://api.github.com/users/ArtfulCoder/following{/other_user}","gists_url":"https://api.github.com/users/ArtfulCoder/gists{/gist_id}","starred_url":"https://api.github.com/users/ArtfulCoder/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ArtfulCoder/subscriptions","organizations_url":"https://api.github.com/users/ArtfulCoder/orgs","repos_url":"https://api.github.com/users/ArtfulCoder/repos","events_url":"https://api.github.com/users/ArtfulCoder/events{/privacy}","received_events_url":"https://api.github.com/users/ArtfulCoder/received_events","type":"User","site_admin":false},"milestone":{"url":"https://api.github.com/repos/GoogleCloudPlatform/kubernetes/milestones/6","html_url":"https://github.com/GoogleCloudPlatform/kubernetes/milestones/v1.0","labels_url":"https://api.github.com/repos/GoogleCloudPlatform/kubernetes/milestones/6/labels","id":969317,"number":6,"title":"v1.0","description":"Issues that need to be resolved for v1.0 of Kubernetes.","creator":{"login":"goltermann","id":9358478,"avatar_url":"https://avatars.githubusercontent.com/u/9358478?v=3","gravatar_id":"","url":"https://api.github.com/users/goltermann","html_url":"https://github.com/goltermann","followers_url":"https://api.github.com/users/goltermann/followers","following_url":"https://api.github.com/users/goltermann/following{/other_user}","gists_url":"https://api.github.com/users/goltermann/gists{/gist_id}","starred_url":"https://api.github.com/users/goltermann/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/goltermann/subscriptions","organizations_url":"https://api.github.com/users/goltermann/orgs","repos_url":"https://api.github.com/users/goltermann/repos","events_url":"https://api.github.com/users/goltermann/events{/privacy}","received_events_url":"https://api.github.com/users/goltermann/received_events","type":"User","site_admin":false},"open_issues":44,"closed_issues":280,"state":"open","created_at":"2015-02-06T20:27:16Z","updated_at":"2015-05-15T17:10:01Z","due_on":null,"closed_at":null},"comments":5,"created_at":"2015-05-15T12:53:23Z","updated_at":"2015-05-15T17:25:25Z","closed_at":null,"body":"kube2sky cannot talk to apiserver \r\n\r\n\r\n```\r\nroot@kubernetes-minion-3nqj:/etc# docker ps\r\n967f6215acd9        gcr.io/google_containers/kube2sky:1.4                \"/kube2sky -domain=c\r\n```\r\n967f6215acd9 is kube2sky container.\r\n\r\n```\r\nroot@kubernetes-minion-3nqj:/etc# docker logs 967f6215acd9\r\nI0515 11:27:17.448247       1 kube2sky.go:148] Etcd server found: http://127.0.0.1:4001\r\nI0515 11:27:18.451591       1 kube2sky.go:202] Using https://10.0.0.2:443 for kubernetes master\r\nI0515 11:27:18.451604       1 kube2sky.go:203] Using kubernetes API\r\nE0515 11:27:48.452108       1 reflector.go:130] Failed to list *api.Service: Get https://10.0.0.2:443/api/v1beta3/services: dial tcp 10.0.0.2:443: i/o timeout\r\n```\r\n\r\n10.0.0.2 does seem to be the virtual ip for apiserver that kube2sky is using.\r\n```\r\n-A KUBE-PORTALS-CONTAINER -d 10.0.0.2/32 -p tcp -m comment --comment \"default/kubernetes:\" -m tcp --dport 443 -j REDIRECT --to-ports 59180\r\n-A KUBE-PORTALS-HOST -d 10.0.0.2/32 -p tcp -m comment --comment \"default/kubernetes:\" -m tcp --dport 443 -j DNAT --to-destination 10.240.30.233:59180\r\n```\r\n\r\n@vishh @thockin @cjcullen "},"comment":{"url":"https://api.github.com/repos/GoogleCloudPlatform/kubernetes/issues/comments/102463479","html_url":"https://github.com/GoogleCloudPlatform/kubernetes/issues/8314#issuecomment-102463479","issue_url":"https://api.github.com/repos/GoogleCloudPlatform/kubernetes/issues/8314","id":102463479,"user":{"login":"vishh","id":7063592,"avatar_url":"https://avatars.githubusercontent.com/u/7063592?v=3","gravatar_id":"","url":"https://api.github.com/users/vishh","html_url":"https://github.com/vishh","followers_url":"https://api.github.com/users/vishh/followers","following_url":"https://api.github.com/users/vishh/following{/other_user}","gists_url":"https://api.github.com/users/vishh/gists{/gist_id}","starred_url":"https://api.github.com/users/vishh/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/vishh/subscriptions","organizations_url":"https://api.github.com/users/vishh/orgs","repos_url":"https://api.github.com/users/vishh/repos","events_url":"https://api.github.com/users/vishh/events{/privacy}","received_events_url":"https://api.github.com/users/vishh/received_events","type":"User","site_admin":false},"created_at":"2015-05-15T17:25:25Z","updated_at":"2015-05-15T17:25:25Z","body":"The RO port is being deprecated. We just posted a public announcement that\nit is being deprecated.\n\nOn Fri, May 15, 2015 at 10:00 AM, Abhi Shah <notifications@github.com>\nwrote:\n\n>  Failed to list *api.Service: Get https://10.0.0.2:443/api/v1beta3/services: x509: certificate is valid for 146.148.42.26, not 10.0.0.2\n>\n> After setting up all the certs, I got the above error.\n> I believe we can't use https to talk to apiserver, as long as the certs\n> are master host ip based, and the clients are using a virtual ip to reach\n> apiserver.\n>\n> If we can do token auth over http, it would defeat the purpose since the\n> token can be intercepted.\n>\n> I believe we should rollback any changes related to using https to talk to\n> apiserver from dns pod, or any other pod for that matter which uses virtual\n> ip of apiserver to reach it.\n>\n> For kube2sky, we can use the RO port of apiserver and move on...\n>\n> @cjcullen <https://github.com/cjcullen> @thockin\n> <https://github.com/thockin> @vishh <https://github.com/vishh>\n>\n> —\n> Reply to this email directly or view it on GitHub\n> <https://github.com/GoogleCloudPlatform/kubernetes/issues/8314#issuecomment-102458942>\n> .\n>\n"}}