在istio中更改kiali的秘密是行不通的 [英] Changing secrets of kiali in istio is not working

问题描述

我已使用 demo 个人资料在 eks 集群中部署了 istio . 演示具有 kiali 部署. kiali仪表板的访问密码为( username:admin ， password:admin ).我能够使用此凭据访问我的仪表板.然后，我创建了自己的秘密.

I have deployed istio in my eks cluster with demo profile. demo has kiali deployment with it. The access secret for kiali dashboard is ( username:admin,password:admin ).I was able to access my dashboard with this credentials. Then I created my own secrets.

$ echo shajaltest | base64
$ c2hhamFsdGVzdAo=

删除了基里亚利的秘密.

Deleted the secrets for kiali.

$ kubectl delete secrets kiali -n istio-system

再次使用此 yaml

apiVersion: v1
kind: Secret
metadata:
  name: kiali
  namespace: istio-system
  labels:
    app: kiali
type: Opaque
data:
  username: c2hhamFsdGVzdAo=
  passphrase: c2hhamFsdGVzdAo=

所有这些之后，我删除了kiali的吊舱. 之后，我将无法使用该用户名和密码访问我的仪表板. 我该怎么办?

After all of that I deleted the pod of kiali. After that I can not access my dashboard with this username and password. What should I do ?

我还检查了基阿里的秘密.它已更新为最近的秘密值.

I also checked the secrets of kiali. It has updated with recent secret value.

这是 kiali pod 的日志.

I0408 18:30:30.194890       1 kiali.go:66] Kiali: Version: v1.15.1, Commit: 
3263b7692bcc06ad40292bedea5a9213e04aa9db
I0408 18:30:30.195179       1 kiali.go:205] Using authentication strategy [login]
I0408 18:30:30.195205       1 kiali.go:87] Kiali: Console version: 1.15.0
I0408 18:30:30.195212       1 kiali.go:286] Updating base URL in index.html with [/kiali]
I0408 18:30:30.195376       1 kiali.go:267] Generating env.js from config
I0408 18:30:30.197274       1 server.go:57] Server endpoint will start at [:20001/kiali]
I0408 18:30:30.197285       1 server.go:58] Server endpoint will serve static content from [/opt/kiali/console]
I0408 18:30:30.197297       1 metrics_server.go:18] Starting Metrics Server on [:9090]
I0408 18:30:30.197367       1 kiali.go:137] Secret is now available.

推荐答案

您是否尝试过遵循

Have you tried to follow the istio documentation about changing the credentials in kiali?

我按照以下步骤复制了您的问题，一切正常.

I made a reproduction of your issue with below steps and everything worked just fine.

在出现提示时输入 Kiali用户名:

KIALI_USERNAME=$(read -p 'Kiali Username: ' uval && echo -n $uval | base64)

在出现提示时输入 Kiali密码:

KIALI_PASSPHRASE=$(read -sp 'Kiali Passphrase: ' pval && echo -n $pval | base64)

要创建机密，请运行以下命令:

To create a secret, run the following commands:

NAMESPACE=istio-system

---

cat <<EOF | kubectl apply -f -
apiVersion: v1
kind: Secret
metadata:
  name: kiali
  namespace: $NAMESPACE
  labels:
    app: kiali
type: Opaque
data:
  username: $KIALI_USERNAME
  passphrase: $KIALI_PASSPHRASE
EOF

只需使用以下命令重新创建kiali吊舱

And simply recreate the kiali pod with

kubectl delete pod <name_of_the_kiali_pod> -n istio-system

---

编辑

正如@Shajal Ahamed在评论中提到的那样，问题是缺少-n，如果您只想使用echo，请使用.

As @Shajal Ahamed mentioned in comments the problem was absence of -n, if you want to use just echo, then use.

echo -n username | base64
echo -n passphrase | base64

这篇关于在istio中更改kiali的秘密是行不通的的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！