Question

通过以下方式在具有TLS的Kubernetes上创建Vault和Consul集群
https://testdriven.io/blog/running-vault-and-consul-on-kubernetes/ 并尝试使用https://learn.hashicorp.com/vault/identity-access-management/vault-agent-k8s配置Kubernetes身份验证方法一切顺利进行到步骤3（验证Kubernetes auth方法配置），当我测试连接时，出现错误“无法连接到Vault端口8200：连接被拒绝”。有人可以帮我吗？

$ kubectl run --generator=run-pod/v1 tmp --rm -i --tty --serviceaccount=vault-auth --image alpine:3.7

# VAULT_ADDR=https://vault:8200
/ # curl -s $VAULT_ADDR/v1/sys/health | jq
/ # curl  $VAULT_ADDR/v1/sys/health | jq
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--
 0curl: (7) Failed to connect to vault port 8200: Connection refused



$ k get svc
NAME         TYPE        CLUSTER-IP       EXTERNAL-IP   PORT(S)                                                                            AGE
consul       ClusterIP   None             <none>        8500/TCP,8443/TCP,8400/TCP,8301/TCP,8301/UDP,8302/TCP,8302/UDP,8300/TCP,8600/TCP   177m
kubernetes   ClusterIP   10.245.0.1       <none>        443/TCP                                                                            26h
vault        ClusterIP   10.245.215.195   <none>        8200/TCP

使用Kubernetes的保险柜身份验证失败

0 个答案: