-
Bug
-
Resolution: Fixed
-
Major
-
None
-
-
kubernetes-client-api 6.4.1-215.v2ed17097a_8e9
When setting up Kubernetes with IPv6, agent provisioning fail with the following exception:
javax.net.ssl.SSLPeerUnverifiedException: Hostname fd80:aa28:beda::1 not verified: certificate: sha256/92pzbd0xoDTcGK75ndyNYa7Q5TtemqzEEu0PxzyBdNI= DN: CN=kube-apiserver subjectAltNames: [fd80:aa28:beda:0:0:0:0:1, 2600:1f10:40fc:a403:4078:b179:4ce6:ebcd, 10.0.112.14, XXXXXXXXXXXXXXXXXXXXXXXXXXXXX.gr7.us-east-1.eks.amazonaws.com, ip-10-0-112-14.ec2.internal, kubernetes, kubernetes.default, kubernetes.default.svc, kubernetes.default.svc.cluster.local]
it seems clear that IPv6 may not be supported by the fabric8/kubernetes-client. Because of a bug in Okhttp3 fixed in Okhttp4:
- https://github.com/square/okhttp/issues/5885
- https://github.com/fabric8io/kubernetes-client/issues/2632
- https://github.com/fabric8io/kubernetes-client/issues/3499
Workaround
Disable TLS in the Kubernetes Cloud configuration. OR add the system property -Dkubernetes.disable.hostname.verification=true on Jenkins startup.