Lab 6.1 Step 2: No Resources Found
After typing the command under step 2: kubectl get secrets --all-namespaces, I have "No resources found" returned. Is there some underlying detail I missed along the way?
FYI, /var/run/secrets does not exist
Best Answer
-
Hi @mabricker,
In latest releases, Kubernetes no longer creates token secrets automatically. It becomes the user's responsibility to create them as desired. The following commands should work instead:
export token=$(kubectl create token default)
curl https://k8scp:6443/apis --header "Authorization: Bearer $token" -k
Regards,
-Chris3
Answers
-
Had the same question as @mabricker . Thanks @chrispokorni for explaining why the default tokens are not created (anymore). The Course material should be updated accordingly.
0 -
I also ran into the same issue. Glad to see it answered here. Thanks @chrispokorni
0 -
Should the above commands create resources that should be viewable using the kubectl get secrets command? Because it does not create any secrets according to my installation.
0 -
Hi @dont827273,
The
kubectl create token ...
command above creates a token, not a secret.You can read more at https://kubernetes.io/docs/concepts/configuration/secret/
Regards,
-Chris0 -
its 2/28/2023 and I've ran into this exact issue with this lab material. SO basically your suggestion is to create it and disregard steps 1-3.
0 -
Same issue here. @chrispokorni Do we create secrets or just skip these steps?
0 -
Hello @kmai007
In the updated lab (2/28/2023) we have added the step 6.2 which generates the token
export token=$(kubectl create token default)
Please verify.
thanks,
Fazlur0 -
Summary of issue and proposed answer and correction to lab document:
The Problem:
For Lab 6.1 - Step 1 -3
With k8s Version 1.25.1 you will get the following
$ kubectl get secrets --all-namespaces
No resources found
$ kubectl get secrets
No resources found in default namespace.Solution: Skip steps 1-4 and instead run
$ export token=$(kubectl create token default)
Then as in step 5 run:
$ curl https://k8scp:6443/apis --header "Authorization: Bearer $token" -k0 -
0
-
Is that version active? at the moment I do not see step 6.2
0 -
Hi @nicocerquera,
Yes it is. It has been active since its release 3/1/2023.
Please clear your browser cache, log back into the course, and navigate to Lab 6.1 under the Lessons menu, or simply download the entire lab guide PDF from the Resources menu.
Regards,
-Chris0 -
How are you @chrispokorni? I did precisely the instructions you gave ( export token=$(kubectl create token default)
and curl https://k8scp:6443/apis --header "Authorization: Bearer $token" -k),
although the answer is not a resource found when I try to get secrets.0 -
I am good @maybel, thank you for asking. How are things with you?
The token creation command does not generate a secret. That is the reason why no secret is found, which is the expected behavior.
However, was thecurl
successful once the token was supplied?Regards,
-Chris0 -
Hi @chrispokorni , As the British like to say: not too bad. Thanks for the curl question because it clarified the exact sentence creating the secret. Unfortunately, it didn't work.
student@cp:~$ kubectl get namespaces NAME STATUS AGE accounting Active 113d default Active 125d kube-node-lease Active 125d kube-public Active 125d kube-system Active 125d linkerd Active 82d linkerd-viz Active 82d low-usage-limit Active 119d small Active 117d student@cp:~$ kubectl -n default get secrets NAME TYPE DATA AGE dashboard-kubernetes-dashboard-certs Opaque 0 41d dashboard-kubernetes-dashboard-token kubernetes.io/service-account-token 3 5d17h kubernetes-dashboard-csrf Opaque 1 41d kubernetes-dashboard-key-holder Opaque 2 41d myingress-ingress-nginx-admission Opaque 3 105d sh.helm.release.v1.dashboard.v1 helm.sh/release.v1 1 41d sh.helm.release.v1.myingress.v1 helm.sh/release.v1 1 103d student@cp:~$ kubectl -n default get serviceaccounts NAME SECRETS AGE dashboard-kubernetes-dashboard 0 41d default 0 125d myingress-ingress-nginx 0 103d student@cp:~$ export token=$(kubectl create token default) student@cp:~$ export token=$(kubectl create token default -n default) student@cp:~$ curl https://k8scp:6443/apis --header "Authorization: Bearer $token" -k { "kind": "APIGroupList", "apiVersion": "v1", "groups": [ { "name": "apiregistration.k8s.io", "versions": [ { "groupV ... ... ], "preferredVersion": { "groupVersion": "metrics.k8s.io/v1beta1", "version": "v1beta1" } } ] }student@cp:~$kubectl -n default get secrets NAME TYPE DATA AGE dashboard-kubernetes-dashboard-certs Opaque 0 41d dashboard-kubernetes-dashboard-token kubernetes.io/service-account-token 3 5d17h kubernetes-dashboard-csrf Opaque 1 41d kubernetes-dashboard-key-holder Opaque 2 41d myingress-ingress-nginx-admission Opaque 3 105d sh.helm.release.v1.dashboard.v1 helm.sh/release.v1 1 41d sh.helm.release.v1.myingress.v1 helm.sh/release.v1 1 103d student@cp:~$ kubectl -n default get serviceaccounts NAME SECRETS AGE dashboard-kubernetes-dashboard 0 41d default 0 125d myingress-ingress-nginx 0 103d
As you can see, I have a namespace called default. The namespace called default has a service account called default as well.
From help I got this:```
Request a token for a service account in a custom namespace
kubectl create token myapp --namespace myns
```Because of the command help, I created a token called default in the namespace default, and there is no secret with that name in my namespace default.
By the way, I'm doing lab 15, and I don't catch how to create secrets .I appreciate any help you can provide. You always find the patience to help me.
0 -
sorry for the giant letters
0 -
Hi @maybel,
Based on the output shown at step 3 of lab exercise 6.1, your curl command seems to be successful, as it produced the expected output. Meaning that the token was also created successfully.
If needed, a secret object can be created by the user to store the token:
https://kubernetes.io/docs/concepts/configuration/secret/#service-account-token-secretsRegards,
-Chris0
Categories
- All Categories
- 60 LFX Mentorship
- 113 LFX Mentorship: Linux Kernel
- 618 Linux Foundation IT Professional Programs
- 321 Cloud Engineer IT Professional Program
- 142 Advanced Cloud Engineer IT Professional Program
- 55 DevOps Engineer IT Professional Program
- 68 Cloud Native Developer IT Professional Program
- 6 Express Training Courses
- 6 Express Courses - Discussion Forum
- 2.3K Training Courses
- 19 LFC110 Class Forum - Discontinued
- 9 LFC131 Class Forum
- 31 LFD102 Class Forum
- 175 LFD103 Class Forum
- 22 LFD121 Class Forum
- 2 LFD137 Class Forum
- 61 LFD201 Class Forum
- 2 LFD210 Class Forum
- 1 LFD210-CN Class Forum
- 1 LFD213 Class Forum - Discontinued
- 128 LFD232 Class Forum - Discontinued
- LFD237 Class Forum
- 23 LFD254 Class Forum
- 653 LFD259 Class Forum
- 108 LFD272 Class Forum
- 1 LFD272-JP クラス フォーラム
- 4 LFD273 Class Forum
- 2 LFS145 Class Forum
- 28 LFS200 Class Forum
- 740 LFS201 Class Forum - Discontinued
- 1 LFS201-JP クラス フォーラム
- 12 LFS203 Class Forum
- 92 LFS207 Class Forum
- 301 LFS211 Class Forum
- 54 LFS216 Class Forum
- 47 LFS241 Class Forum
- 41 LFS242 Class Forum
- 37 LFS243 Class Forum
- 12 LFS244 Class Forum
- 41 LFS250 Class Forum
- 1 LFS250-JP クラス フォーラム
- LFS251 Class Forum
- 142 LFS253 Class Forum
- LFS254 Class Forum
- LFS255 Class Forum
- LFS256 Class Forum
- LFS257 Class Forum
- 1.2K LFS258 Class Forum
- 10 LFS258-JP クラス フォーラム
- 106 LFS260 Class Forum
- 145 LFS261 Class Forum
- 39 LFS262 Class Forum
- 83 LFS263 Class Forum - Discontinued
- 15 LFS264 Class Forum - Discontinued
- 11 LFS266 Class Forum - Discontinued
- 20 LFS267 Class Forum
- 18 LFS268 Class Forum
- 26 LFS269 Class Forum
- 204 LFS272 Class Forum
- 1 LFS272-JP クラス フォーラム
- LFS274 Class Forum
- 3 LFS281 Class Forum
- 249 LFW211 Class Forum
- 177 LFW212 Class Forum
- 9 SKF100 Class Forum
- SKF200 Class Forum
- 907 Hardware
- 220 Drivers
- 74 I/O Devices
- 44 Monitors
- 116 Multimedia
- 210 Networking
- 102 Printers & Scanners
- 86 Storage
- 764 Linux Distributions
- 88 Debian
- 66 Fedora
- 15 Linux Mint
- 13 Mageia
- 24 openSUSE
- 143 Red Hat Enterprise
- 33 Slackware
- 13 SUSE Enterprise
- 357 Ubuntu
- 482 Linux System Administration
- 40 Cloud Computing
- 70 Command Line/Scripting
- Github systems admin projects
- 95 Linux Security
- 80 Network Management
- 108 System Management
- 51 Web Management
- 72 Mobile Computing
- 25 Android
- 32 Development
- 1.2K New to Linux
- 1.1K Getting Started with Linux
- 545 Off Topic
- 132 Introductions
- 223 Small Talk
- 22 Study Material
- 831 Programming and Development
- 282 Kernel Development
- 515 Software Development
- 974 Software
- 260 Applications
- 185 Command Line
- 3 Compiling/Installing
- 119 Games
- 318 Installation
- 65 All In Program
- 65 All In Forum
Upcoming Training
-
August 20, 2018
Kubernetes Administration (LFS458)
-
August 20, 2018
Linux System Administration (LFS301)
-
August 27, 2018
Open Source Virtualization (LFS462)
-
August 27, 2018
Linux Kernel Debugging and Security (LFD440)