CKS Lab-Use Bootstrap token for authentication Q.2

Kubernetes
,
#1

Can’t manage to get positive result, even pasting the very solution given:

image
image2139×1116 170 KB

My attempt:

apiVersion: v1
kind: Secret
metadata:
  # Name MUST be of form "bootstrap-token-<token id>"
  name: bootstrap-token-07401b
  namespace: kube-system

# Type MUST be 'bootstrap.kubernetes.io/token'
type: bootstrap.kubernetes.io/token
stringData:
  # Human readable description. Optional.
  description: "The default bootstrap token generated by 'kubeadm init'."

  # Token ID and secret. Required.
  token-id: 07401b
  token-secret: f395accd246ae52d

  # Allowed usages.
  usage-bootstrap-authentication: "true"
  usage-bootstrap-signing: "true"

  # Extra groups to authenticate the token as. Must start with "system:bootstrappers:"
  auth-extra-groups: system:bootstrappers:kubeadm:default-node-token
#2

HI @Marco78

I tried out this lab, and it worked as expected.
The YAML in the code block you posted looks good.

bootstrap.secret
bootstrap.secret1748×829 128 KB

Can you please try this lab again?

#4

Still not working:

image
image1889×768 59.5 KB

Basically I copy paste what’s in the docs and change auth-extra-groups as per lab trace then delete expiration.

#5

I’ve noticed something strange in the callback:

image
image3032×1045 316 KB

hope it helps!

#6

It’s just base64 encoded format of the plainText entry. Do you see any additional space there?

#7

No but the problem is that if you grep the secret you’ll need to use base64 not unencoded value otherwise it won’t find anything, just tested again:

image
image3014×1048 184 KB

I’ve suspected that was the problem…

#8

Hi, is there any news?

#9

Hi @Marco78

I am not sure what you are trying to say with:

if you grep the secret you’ll need to use base64 not unencoded

If you need to see if the text you passed is well read while creating the secret. You can echo the encoded value and decode it with --decode and check if the value you entered matches with the decoded one.

I suspect there is some extra space somewhere that’s causing the issue.

#10

image
image2593×1048 246 KB

#11

Hi @Marco78 ,

Thanks for highlighting this. We’re looking into this.

Regards,

#12

Hi @Marco78 ,

The team improved the validation. Please give it a try.

Regards,

#13

ok it’s working now, thanks