k8s metrics server x.509 인증서 에러 원인과 해결방법

by

쿠버네티스를 사용하다 보면, x509 인증서 에러의 대한 이야기를 많이 보게 됩니다. 이 에러의 원인과 해결 방법에 대해서 알아보도록 하겠습니다.

01. x.509 인증서 에러가 도대체 뭐야 ?

01) 인증서는 어떻게 탄생했을까 ?

원래 컴퓨터와 컴퓨터간의 통신에서는 평문을 통한 전송 만을 수행하였습니다. 그 과정에서 외부에 감청 및 변조된 패킷을 보내는 일들이 발생하기 시작했습니다. 이를 방지하기 위해서 암호화 하여 통신하도록 계획 하였습니다.

암호화의 기본은 데이터를 보내는 측에서는 암호화를 받는 측에서는 복호화가 가능해야 합니다. 일반적으로, 암호화 복호화 키는 동일하지 않은 비대칭 키를 사용해서 진행하게 되는데, 우리가 B 와 통신하기 위해서는 B에게 어떤 키를 사용할지 미리 알고 있어야 안전한 통신이 되는지 확인할 수 있게 되었습니다.

그래서, 과거에는 암호화 키(공용키) 를 공개 하여, 이 키로 암호화 해주세요 라고 외쳤지만, 한번 더 보안을 신경쓰는 경우가 생기기 시작하였습니다.

내가 B 서버 인데, 옆에 있던 C가 마치 B 인 마냥 내가 B 이니 이 키로 암호화 해주세요 하고 공개 해버린 것 입니다.
이 문제를 해결하기 위해서, IT 기관들은 정말 믿을수 있는 최상위 인증 기관(ROOT-CA)을 선정하여, 암호화키를 전달할때 암호화 키만 전달하는 것이 아닌, 암호화 키 + 어떤 서버의 것이다 + 인증기관의 대한 정보 3가지를 합쳐서, 인증서를 발급해주기 시작하였고, 이를 통해 서버를 속일 수 없게 만들었습니다.

02) 그래서, 인증서 에러의 원인은 ?

쿠버네티스는 보안 통신(TLS)을 위해 인증서를 통해 데이터 통신을 하고 있습니다. 이를 위해 인증서를 사용하고 있지만, 믿을 만한 인증기관인 ROOT-CA가 아닌 자신이 작성한 인증서를 통해 데이터 통신을 하고 있습니다.

그렇기에, 서버에 접근하려는 대상은 인증서 자체를 믿을수 없기에 에러를 발생하게 되었습니다.

02. 해결 방법

01) 인증기관의 인증서가 아니더라도 허용하는 방법 (–insecure)

아래 방식은 새롭게 등록하는 방식으로 진행 합니다.
동작하는 도중 EDIT 을 통해서 진행해도 되나, 파일에 기록되지 않는 단점이 있어 삭제 후 파일을 수정하여 배포합니다.

(01) 기존의 메트릭 서버 정보를 삭제 합니다.

(02) 배포되는 yml 파일의 내용 중 (–insecure-tls) 를 추가 합니다.

배포 파일을 수정 모드로 열기 합니다. 

vim components.yml

키워드 찾기 : /[찾을 키워드] -> /args

...
spec:
      containers:
      - args:
        - --cert-dir=/tmp
        - --kubelet-insecure-tls (추가)
        - --secure-port=4443
        - --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname
        - --kubelet-use-node-status-port
        - --metric-resolution=15s
...

수정 파일을 배포 합니다.

kubectl apply -f components.yml

이후 정상적으로 운영 되는지 확인 합니다.

02) 다른 방법

인증기관 정보에 내 서버 정보 추가하는 방법도 있습니다. 다만, 작업 자체가 조금 긴 편이라. 다음 포스팅에 시간이 된다면 작성해 보겠습니다.

462 thoughts on “k8s metrics server x.509 인증서 에러 원인과 해결방법”

  81. You actually make it seem really easy together with
    your presentation however I in finding this matter to be actually something that I feel I’d by no means
    understand. It kind of feels too complicated
    and extremely extensive for me. I am having a look ahead for your next submit, I’ll try to get the
    dangle of it! Lista escape room

    응답

  111. Howdy! This post could not be written much better! Reading through this post reminds me of my previous roommate! He constantly kept talking about this. I am going to send this article to him. Pretty sure he’s going to have a good read. Many thanks for sharing!

    응답

  124. I blog quite often and I really appreciate your content. The article has really peaked my interest. I’m going to bookmark your site and keep checking for new details about once a week. I opted in for your Feed too.

    응답

  147. mexican border pharmacies shipping to usa [url=https://mexicandeliverypharma.com/#]mexico pharmacies prescription drugs[/url] pharmacies in mexico that ship to usa

    응답

  168. mexican online pharmacies prescription drugs [url=https://mexicandeliverypharma.online/#]pharmacies in mexico that ship to usa[/url] mexican border pharmacies shipping to usa

    응답

  188. The next time I read a blog, Hopefully it won’t disappoint me as much as this one. After all, I know it was my choice to read through, but I actually believed you would probably have something useful to talk about. All I hear is a bunch of crying about something you could fix if you weren’t too busy searching for attention.

    응답

  191. Aw, this was an extremely nice post. Taking a few minutes and actual effort to create a good article… but what can I say… I procrastinate a whole lot and never manage to get nearly anything done.

    응답

  198. Howdy! This post couldn’t be written much better! Looking at this post reminds me of my previous roommate! He constantly kept talking about this. I will send this post to him. Pretty sure he will have a good read. Thanks for sharing!

    응답

  199. reputable mexican pharmacies online [url=https://mexicandeliverypharma.online/#]mexican border pharmacies shipping to usa[/url] п»їbest mexican online pharmacies

    응답

  201. Oh my goodness! Awesome article dude! Thank you, However I am having issues with your RSS. I don’t understand the reason why I am unable to subscribe to it. Is there anybody else having the same RSS problems? Anyone who knows the solution can you kindly respond? Thanx!

    응답

  205. mexico drug stores pharmacies [url=https://mexicandeliverypharma.online/#]buying from online mexican pharmacy[/url] buying prescription drugs in mexico online

    응답

  220. Oh my goodness! Awesome article dude! Thank you so much, However I am going through problems with your RSS. I don’t know the reason why I can’t join it. Is there anybody getting identical RSS problems? Anyone that knows the solution will you kindly respond? Thanx.

    응답

  232. Good post. I learn something new and challenging on websites I stumbleupon on a daily basis. It will always be exciting to read content from other authors and use something from other sites.

    응답

  234. This is the perfect website for anybody who wants to find out about this topic. You realize so much its almost hard to argue with you (not that I actually will need to…HaHa). You definitely put a fresh spin on a subject that has been written about for ages. Wonderful stuff, just great.

    응답

  236. Aw, this was an extremely nice post. Spending some time and actual effort to generate a very good article… but what can I say… I hesitate a whole lot and never manage to get nearly anything done.

    응답

  245. I must thank you for the efforts you’ve put in writing this site. I am hoping to view the same high-grade blog posts by you in the future as well. In truth, your creative writing abilities has encouraged me to get my own, personal site now 😉

    응답

  251. I truly love your website.. Excellent colors & theme. Did you build this amazing site yourself? Please reply back as I’m hoping to create my very own site and would love to learn where you got this from or exactly what the theme is named. Appreciate it!

    응답

  264. I seriously love your site.. Pleasant colors & theme. Did you build this web site yourself? Please reply back as I’m looking to create my own personal blog and want to find out where you got this from or what the theme is named. Thanks.

    응답

  276. Hello! I could have sworn I’ve visited this website before but after browsing through some of the articles I realized it’s new to me. Nonetheless, I’m definitely delighted I stumbled upon it and I’ll be bookmarking it and checking back frequently.

    응답

  298. I’m impressed, I have to admit. Rarely do I encounter a blog that’s equally educative and amusing, and let me tell you, you’ve hit the nail on the head. The problem is something not enough folks are speaking intelligently about. I am very happy that I stumbled across this in my hunt for something concerning this.

    응답

  309. After checking out a few of the blog articles on your web site, I seriously like your technique of writing a blog. I book marked it to my bookmark website list and will be checking back soon. Please visit my web site as well and tell me what you think.

    응답

  311. The very next time I read a blog, I hope that it won’t fail me just as much as this one. After all, Yes, it was my choice to read through, but I really believed you would have something useful to say. All I hear is a bunch of moaning about something that you could fix if you weren’t too busy searching for attention.

    응답

  328. I’d like to thank you for the efforts you have put in writing this blog. I am hoping to see the same high-grade blog posts by you later on as well. In fact, your creative writing abilities has motivated me to get my very own blog now 😉

    응답

  333. POKERLADEN.DE   &  Pokerchips  Mit dem Laden des Videos akzeptieren Sie die Datenschutzerklärung von YouTube.Mehr erfahren Understatement mit Wirkung erzielen Logoprints auf einem Ballmarker. In verschiedenen Größen, gedomt in Sonderform oder als Clip für die Golfmütze: Ballmarker sind der ideale Ort für Imagewerbung mit Stil. Dezent wird der Clip im Golfballdesign auf das Cap oder Visor geklemmt. Der Ballmarker mit Ihrem Logoaufdruck lässt sich leicht vom Magneten  abnehmen und danach wieder anbringen. Ob in der Tasche oder als Clip: Der Ballmarker ist immer dabei und muss sich auf dem Grün sehen lassen. Das kann er auch – mit einem individuellen Logo- oder Vereinsaufdruck. So bleibt der Ballmarker unverkennbar, wieder erkennbar und in guter Verbindung zu seinem Spieler. Ganz schön smart. Ganz schön einzigartig.
    https://teletype.in/@ligaportalat
    Baccarat ist ein Glücksspiel, welches in vielen verschiedenen Online-Casinos angeboten wird. Das Spiel wurde im 16. Jahrhundert in Neapel erfunden. Daher auch der Name „Baccara“, denn das bedeutet im neapolitanischen Dialekt „Null“. In der Regel lassen sich in Online-Casinos zwei verschiedene Varianten zocken, nämlich Baccara chemin de fer und Baccara banque. Zudem gibt es noch weitere Spielvariationen. Ziel des Baccarats ist es, mit zwei oder drei Karten neun Punkte zu erzielen. Oder zumindest nah an die neun Punkte heranzukommen und dabei den Dealer zu überbieten. In fast allen Belangen haben Internet Casinos deutliche Vorteile gegenüber Spielotheken und Spielbanken. Allein schon der große Unterschied in den Auszahlungsquoten von Spielautomaten aufgrund der seit 2014 geänderten Spielverordnung macht klar, warum es für deutsche Spieler deutlich attraktiver ist, online zu spielen. Aber nicht nur der finanzielle Vorteil ist ausschlaggebend! Hier findet ihr alle Vor- und Nachteile von Online Casinos und werdet erkennen, warum es deutlich besser ist, im Internet zu spielen.

    응답

  336. His touchline telling-off, though, was the least of the worries for the Liverpool boss as a troubling season plumbed new depths on the weekend he marked seven years in charge. The damage was done earlier in the year with results like the defeats to Nottingham Forest and Leeds United, or heavy away losses at Brighton and Wolves. Its recent run has been good but not quite good enough. Jurgen Klopp's furious outburst on Liverpool touchline dismissed by Jamie Carragher Subscribe to our Free Email Newsletter That’s another free-kick in the space of two minutes for Leicester, with Liverpool putting up a physical start here. Luis Diaz puts in a rough tackle on James Maddison but nothing comes of the Foxes cross. Southampton vs Liverpool Possible Starting XI: You thought Liverpool was done? WRONG! Salah makes it 6-0! This is a thumping! Liverpool again charges into the United box from the left side. The initial low cross is blocked but the rebound lands up at Salah who fires it in. A brief offside check but everything is in order.
    https://daltonblrs580154.tusblogos.com/27673959/manchester-city-fixtures-results
    My display name says create golfer.  How do I change that?  And the country of origin? DOWNLOAD THE OFFICIAL PGA APP Watch | 2024 PGA Championship – Final Round Recap Serving PGA Members and Growing the Game The US PGA Championship tournament is currently played in the USA in August each year. The first tournament was played in 1916, and up until 1957 was competed as a match play tournament. Since 1958 it has been a stroke play tournament. 2024 Illinois PGA Schedule GOLF, Ill. – January 22, 2024 – The Illinois PGA has announced its tournament schedule for the 2024 season. This season will feature over 50 Illinois PGA Section events. The types of events will vary each week. The 2024 schedule will showcase the Illinois PGA Major Championships, the Illinois Open Series, Illinois

    응답

  337. An outstanding share! I have just forwarded this onto a friend who has been doing a little research on this. And he in fact ordered me dinner simply because I stumbled upon it for him… lol. So let me reword this…. Thanks for the meal!! But yeah, thanx for spending the time to talk about this matter here on your web site.

    응답

  350. An impressive share! I’ve just forwarded this onto a co-worker who had been conducting a little homework on this. And he in fact bought me dinner due to the fact that I discovered it for him… lol. So allow me to reword this…. Thanks for the meal!! But yeah, thanx for spending the time to discuss this subject here on your internet site.

    응답

  370. When I originally left a comment I appear to have clicked the -Notify me when new comments are added- checkbox and from now on every time a comment is added I get four emails with the exact same comment. Perhaps there is a way you are able to remove me from that service? Kudos.

    응답

  375. Hello there! This post couldn’t be written any better! Going through this article reminds me of my previous roommate! He always kept preaching about this. I am going to send this post to him. Pretty sure he’s going to have a great read. I appreciate you for sharing!

    응답

  388. After exploring a number of the blog articles on your website, I seriously appreciate your technique of writing a blog. I book marked it to my bookmark website list and will be checking back in the near future. Please check out my website too and let me know what you think.

    응답

  402. Профессиональный сервисный центр по ремонту сотовых телефонов, смартфонов и мобильных устройств.
    Мы предлагаем: сервис ремонт телефонов
    Наши мастера оперативно устранят неисправности вашего устройства в сервисе или с выездом на дом!

    응답

  403. Профессиональный сервисный центр по ремонту сотовых телефонов, смартфонов и мобильных устройств.
    Мы предлагаем: ремонт мобильных телефонов в москве
    Наши мастера оперативно устранят неисправности вашего устройства в сервисе или с выездом на дом!

    응답

  412. Профессиональный сервисный центр по ремонту квадрокоптеров и радиоуправляемых дронов.
    Мы предлагаем:ремонт квадрокоптеров на дому
    Наши мастера оперативно устранят неисправности вашего устройства в сервисе или с выездом на дом!

    응답

  414. When I originally left a comment I appear to have clicked the -Notify me when new comments are added- checkbox and from now on each time a comment is added I recieve four emails with the same comment. Is there a way you can remove me from that service? Many thanks.

    응답

  416. Hi, I do think this is an excellent blog. I stumbledupon it 😉 I may revisit once again since i have saved as a favorite it. Money and freedom is the greatest way to change, may you be rich and continue to guide others.

    응답

  435. Профессиональный сервисный центр по ремонту радиоуправляемых устройства – квадрокоптеры, дроны, беспилостники в том числе Apple iPad.
    Мы предлагаем: ремонт квадрокоптеров цены
    Наши мастера оперативно устранят неисправности вашего устройства в сервисе или с выездом на дом!

    응답

  437. Профессиональный сервисный центр по ремонту бытовой техники с выездом на дом.
    Мы предлагаем:сервис центры бытовой техники петербург
    Наши мастера оперативно устранят неисправности вашего устройства в сервисе или с выездом на дом!

    응답

  450. This is the right blog for anyone who wishes to find out about this topic. You realize a whole lot its almost hard to argue with you (not that I actually would want to…HaHa). You certainly put a fresh spin on a topic that has been discussed for many years. Great stuff, just great.

    응답

  462. Профессиональный сервисный центр по ремонту варочных панелей и индукционных плит.
    Мы предлагаем: срочный ремонт варочной панели
    Наши мастера оперативно устранят неисправности вашего устройства в сервисе или с выездом на дом!

    응답

  463. Профессиональный сервисный центр по ремонту бытовой техники с выездом на дом.
    Мы предлагаем:ремонт бытовой техники в екб
    Наши мастера оперативно устранят неисправности вашего устройства в сервисе или с выездом на дом!

    응답

Leave a Comment