[JENKINS-55123] Kubernetes plugin does not respect 'no_proxy' configurations when calling Kubernetes API

Type: Bug
Resolution: Unresolved
Priority: Blocker
Component/s: kubernetes-plugin
Labels:
None
Environment:

Hide
Jenkins ver. 2.150.1
Jenkins Plugins:

ace-editor 1.1 true
analysis-core 1.95 true
ant 1.9 true
antisamy-markup-formatter 1.5 true
apache-httpcomponents-client-4-api 4.5.5-3.0 true
async-http-client 1.9.40.0 true
authentication-tokens 1.3 true
badge 1.6 true
basic-branch-build-strategies 1.1.1 true
blueocean 1.9.0 true
blueocean-autofavorite 1.2.2 true
blueocean-bitbucket-pipeline 1.9.0 true
blueocean-commons 1.9.0 true
blueocean-config 1.9.0 true
blueocean-core-js 1.9.0 true
blueocean-dashboard 1.9.0 true
blueocean-display-url 2.2.0 true
blueocean-events 1.9.0 true
blueocean-git-pipeline 1.9.0 true
blueocean-github-pipeline 1.9.0 true
blueocean-i18n 1.9.0 true
blueocean-jira 1.9.0 true
blueocean-jwt 1.9.0 true
blueocean-personalization 1.9.0 true
blueocean-pipeline-api-impl 1.9.0 true
blueocean-pipeline-editor 1.9.0 true
blueocean-pipeline-scm-api 1.9.0 true
blueocean-rest 1.9.0 true
blueocean-rest-impl 1.9.0 true
blueocean-web 1.9.0 true
bouncycastle-api 2.17 true
branch-api 2.1.2 true
build-monitor-plugin 1.12+build.201809061734 true
build-name-setter 1.6.9 true
build-pipeline-plugin 1.5.8 true
build-timeout 1.19 true
build-with-parameters 1.4 true
ccm 3.2 true
checkstyle 3.50 true
clone-workspace-scm 0.6 true
cloudbees-bitbucket-branch-source 2.2.15 true
cloudbees-folder 6.7 true
clover 4.10.0 true
cobertura 1.13 true
code-coverage-api 1.0.4 true
command-launcher 1.2 true
conditional-buildstep 1.3.6 true
config-file-provider 3.4.1 true
configurationslicing 1.47 true
copyartifact 1.41 true
credentials 2.1.18 true
credentials-binding 1.17 true
cucumber-reports 4.2.2 true
description-setter 1.10 true
disk-usage 0.28 true
display-url-api 2.3.0 true
docker-build-publish 1.3.2 true
docker-build-step 2.2 true
docker-commons 1.13 true
docker-custom-build-environment 1.7.3 true
docker-java-api 3.0.14 true
docker-plugin 1.1.5 true
docker-slaves 1.0.7 true
docker-workflow 1.17 true
dockerhub-notification 2.3.0 true
durable-task 1.28 true
email-ext 2.63 true
external-monitor-job 1.7 true
favorite 2.3.2 true
findbugs 4.72 true
ghprb 1.42.0 true
git 3.9.1 true
git-client 2.7.4 true
git-parameter 0.9.6 true
git-server 1.7 true
github 1.29.3 true
github-api 1.95 true
github-branch-source 2.4.1 true
github-oauth 0.31 true
github-organization-folder 1.6 true
gradle 1.29 true
gravatar 2.1 true
greenballs 1.15 true
groovy 2.0 true
groovy-postbuild 2.4.3 true
handlebars 1.1.1 true
handy-uri-templates-2-api 2.1.6-1.0 true
htmlpublisher 1.17 true
http_request 1.8.22 true
icon-shim 2.0.3 true
ivy 1.28 true
jackson2-api 2.9.7.1 true
jacoco 3.0.4 true
javadoc 1.4 true
jdk-tool 1.2 true
jenkins-design-language 1.9.0 true
jenkins-flowdock-plugin 1.1.8 true
jira 3.0.5 true
job-dsl 1.70 true
jobConfigHistory 2.19 true
join 1.21 true
jquery 1.12.4-0 true
jquery-detached 1.2.1 true
jsch 0.1.54.2 true
junit 1.26.1 true
junit-attachments 1.5 true
kubernetes 1.13.7 true
kubernetes-credentials 0.3.0 true
ldap 1.20 true
lockable-resources 2.3 true
mailer 1.22 true
mapdb-api 1.0.9.0 true
mask-passwords 2.12.0 true
matrix-auth 2.3 true
matrix-project 1.13 true
maven-plugin 3.2 true
mercurial 2.4 true
metrics 4.0.2.2 true
metrics-diskusage 3.0.0 true
momentjs 1.1.1 true
monitoring 1.75.0 true
multi-slave-config-plugin 1.2.0 true
nexus-artifact-uploader 2.10 true
nodejs 1.2.7 true
pam-auth 1.4 true
parameterized-trigger 2.35.2 true
performance 3.13 true
pipeline-build-step 2.7 true
pipeline-github-lib 1.0 true
pipeline-graph-analysis 1.9 true
pipeline-input-step 2.8 true
pipeline-maven 3.6.4 true
pipeline-milestone-step 1.3.1 true
pipeline-model-api 1.3.4 true
pipeline-model-declarative-agent 1.1.1 true
pipeline-model-definition 1.3.4 true
pipeline-model-extensions 1.3.4 true
pipeline-rest-api 2.10 true
pipeline-stage-step 2.3 true
pipeline-stage-tags-metadata 1.3.4 true
pipeline-stage-view 2.10 true
pipeline-utility-steps 2.2.0 true
plain-credentials 1.4 true
pubsub-light 1.12 true
rebuild 1.29 true
resource-disposer 0.12 true
reverse-proxy-auth-plugin 1.6.3 true
ruby-runtime 0.12 true
run-condition 1.2 true
scm-api 2.3.0 true
script-security 1.49 true
simple-theme-plugin 0.5.1 true
slack 2.6 true
sonar 2.8.1 true
sse-gateway 1.16 true
ssh-credentials 1.13 true
ssh-slaves 1.22 true
structs 1.17 true
swarm 3.14 true
tasks 4.52 true
throttle-concurrents 2.0.1 true
timestamper 1.8.10 true
token-macro 2.5 true
uno-choice 2.1 true
variant 1.1 true
websocket 1.0.6 true
windows-slaves 1.0 true
workflow-aggregator 2.6 true
workflow-api 2.33 true
workflow-basic-steps 2.13 true
workflow-cps 2.61 true
workflow-cps-global-lib 2.12 true
workflow-durable-task-step 2.26 true
workflow-job 2.27 true
workflow-multibranch 2.20 true
workflow-remote-loader 1.4 true
workflow-scm-step 2.7 true
workflow-step-api 2.17 true
workflow-support 2.23 true
ws-cleanup 0.36 true

Show
Jenkins ver. 2.150.1 Jenkins Plugins: ace-editor 1.1 true analysis-core 1.95 true ant 1.9 true antisamy-markup-formatter 1.5 true apache-httpcomponents-client-4-api 4.5.5-3.0 true async-http-client 1.9.40.0 true authentication-tokens 1.3 true badge 1.6 true basic-branch-build-strategies 1.1.1 true blueocean 1.9.0 true blueocean-autofavorite 1.2.2 true blueocean-bitbucket-pipeline 1.9.0 true blueocean-commons 1.9.0 true blueocean-config 1.9.0 true blueocean-core-js 1.9.0 true blueocean-dashboard 1.9.0 true blueocean-display-url 2.2.0 true blueocean-events 1.9.0 true blueocean-git-pipeline 1.9.0 true blueocean-github-pipeline 1.9.0 true blueocean-i18n 1.9.0 true blueocean-jira 1.9.0 true blueocean-jwt 1.9.0 true blueocean-personalization 1.9.0 true blueocean-pipeline-api-impl 1.9.0 true blueocean-pipeline-editor 1.9.0 true blueocean-pipeline-scm-api 1.9.0 true blueocean-rest 1.9.0 true blueocean-rest-impl 1.9.0 true blueocean-web 1.9.0 true bouncycastle-api 2.17 true branch-api 2.1.2 true build-monitor-plugin 1.12+build.201809061734 true build-name-setter 1.6.9 true build-pipeline-plugin 1.5.8 true build-timeout 1.19 true build-with-parameters 1.4 true ccm 3.2 true checkstyle 3.50 true clone-workspace-scm 0.6 true cloudbees-bitbucket-branch-source 2.2.15 true cloudbees-folder 6.7 true clover 4.10.0 true cobertura 1.13 true code-coverage-api 1.0.4 true command-launcher 1.2 true conditional-buildstep 1.3.6 true config-file-provider 3.4.1 true configurationslicing 1.47 true copyartifact 1.41 true credentials 2.1.18 true credentials-binding 1.17 true cucumber-reports 4.2.2 true description-setter 1.10 true disk-usage 0.28 true display-url-api 2.3.0 true docker-build-publish 1.3.2 true docker-build-step 2.2 true docker-commons 1.13 true docker-custom-build-environment 1.7.3 true docker-java-api 3.0.14 true docker-plugin 1.1.5 true docker-slaves 1.0.7 true docker-workflow 1.17 true dockerhub-notification 2.3.0 true durable-task 1.28 true email-ext 2.63 true external-monitor-job 1.7 true favorite 2.3.2 true findbugs 4.72 true ghprb 1.42.0 true git 3.9.1 true git-client 2.7.4 true git-parameter 0.9.6 true git-server 1.7 true github 1.29.3 true github-api 1.95 true github-branch-source 2.4.1 true github-oauth 0.31 true github-organization-folder 1.6 true gradle 1.29 true gravatar 2.1 true greenballs 1.15 true groovy 2.0 true groovy-postbuild 2.4.3 true handlebars 1.1.1 true handy-uri-templates-2-api 2.1.6-1.0 true htmlpublisher 1.17 true http_request 1.8.22 true icon-shim 2.0.3 true ivy 1.28 true jackson2-api 2.9.7.1 true jacoco 3.0.4 true javadoc 1.4 true jdk-tool 1.2 true jenkins-design-language 1.9.0 true jenkins-flowdock-plugin 1.1.8 true jira 3.0.5 true job-dsl 1.70 true jobConfigHistory 2.19 true join 1.21 true jquery 1.12.4-0 true jquery-detached 1.2.1 true jsch 0.1.54.2 true junit 1.26.1 true junit-attachments 1.5 true kubernetes 1.13.7 true kubernetes-credentials 0.3.0 true ldap 1.20 true lockable-resources 2.3 true mailer 1.22 true mapdb-api 1.0.9.0 true mask-passwords 2.12.0 true matrix-auth 2.3 true matrix-project 1.13 true maven-plugin 3.2 true mercurial 2.4 true metrics 4.0.2.2 true metrics-diskusage 3.0.0 true momentjs 1.1.1 true monitoring 1.75.0 true multi-slave-config-plugin 1.2.0 true nexus-artifact-uploader 2.10 true nodejs 1.2.7 true pam-auth 1.4 true parameterized-trigger 2.35.2 true performance 3.13 true pipeline-build-step 2.7 true pipeline-github-lib 1.0 true pipeline-graph-analysis 1.9 true pipeline-input-step 2.8 true pipeline-maven 3.6.4 true pipeline-milestone-step 1.3.1 true pipeline-model-api 1.3.4 true pipeline-model-declarative-agent 1.1.1 true pipeline-model-definition 1.3.4 true pipeline-model-extensions 1.3.4 true pipeline-rest-api 2.10 true pipeline-stage-step 2.3 true pipeline-stage-tags-metadata 1.3.4 true pipeline-stage-view 2.10 true pipeline-utility-steps 2.2.0 true plain-credentials 1.4 true pubsub-light 1.12 true rebuild 1.29 true resource-disposer 0.12 true reverse-proxy-auth-plugin 1.6.3 true ruby-runtime 0.12 true run-condition 1.2 true scm-api 2.3.0 true script-security 1.49 true simple-theme-plugin 0.5.1 true slack 2.6 true sonar 2.8.1 true sse-gateway 1.16 true ssh-credentials 1.13 true ssh-slaves 1.22 true structs 1.17 true swarm 3.14 true tasks 4.52 true throttle-concurrents 2.0.1 true timestamper 1.8.10 true token-macro 2.5 true uno-choice 2.1 true variant 1.1 true websocket 1.0.6 true windows-slaves 1.0 true workflow-aggregator 2.6 true workflow-api 2.33 true workflow-basic-steps 2.13 true workflow-cps 2.61 true workflow-cps-global-lib 2.12 true workflow-durable-task-step 2.26 true workflow-job 2.27 true workflow-multibranch 2.20 true workflow-remote-loader 1.4 true workflow-scm-step 2.7 true workflow-step-api 2.17 true workflow-support 2.23 true ws-cleanup 0.36 true

Similar Issues:
Powered by SuggestiMate

Show

Kubernetes plugin does not respect 'no_proxy' Java property, Environment Variable or Jenkins Proxy config from 'Jenkins->Manage Jenkins->Manage Plugins->Advanced Tab'.

I have confirmed Kubernetes API access works from the console of the Jenkins server via 'curl' with appropriate proxy environment variables set.

I have used the 'Validate Proxy' button from the 'Jenkins->Manage Jenkins->Manage Plugins->Advanced Tab' I get ' Failed to connect to https://xxxxxxxxxxxxxx.

javax.net.ssl.SSLPeerUnverifiedException: peer not authenticated' and confirmed the request never hits the proxy using proxy logs.

If I configure the Kubernetes plugin slaves never start and if I use the 'Test Connection' button in the plugin config I get 'Error testing connection https://xxxxxxxxxxxxxx: java.io.IOException: Unexpected response code for CONNECT: 403' and have confirmed the request does hit the proxy using proxy logs.

links to

PR-477

Dax Games created issue - 2018-12-11 15:36

Dax Games made changes - 2019-01-16 14:50

Summary

Original: Kubernetes plugin does not respect 'no_proxy' environment variable.

New: Kubernetes plugin does not respect 'no_proxy' configurations

Dax Games made changes - 2019-05-09 20:50

Summary

Original: Kubernetes plugin does not respect 'no_proxy' configurations

New: Kubernetes plugin does not respect 'no_proxy' configurations when calling Kubernetes API

Dax Games made changes - 2019-05-09 20:56

Comment

[ Carlos/Plugin Maintainers,

Can we have a way to pass proxy and no_proxy settings from the Jenkins master to the Kubernetes slave?

Thanks. ]

Carlos Sanchez made changes - 2019-05-10 06:55

Remote Link

New: This issue links to "PR-477 (Web Link)" [ 22761 ]

Jesse Glick made changes - 2019-07-16 19:42

Assignee

Original: Carlos Sanchez [ csanchez ]

Assignee:: Unassigned

Reporter:: Dax Games

Votes:: 2 Vote for this issue

Watchers:: 6 Start watching this issue

Created:: 2018-12-11 15:36

Updated:: 2021-02-05 07:08

Jenkins

Details

Description

Attachments

Issue Links

Activity

People

Dates