Managing Openshift cluster with Python

Question

I have a requirement to use Python to deploy some things to an Openshift cluster (I've been pre-empted from any other solution), so I'm attempting to exercise the kubernetes module:

from kubernetes import client, config
configuration = client.Configuration()
configuration.username='admin'
configuration.password='redacted'
configuration.host='https://api.cluster.example.com:6443'
configuration.verify_ssl = False
v1 = client.CoreV1Api(client.ApiClient(configuration))
ns = {}
ns['kind'] = 'Namespace'
ns['apiVersion'] = 'v1'
ns['metadata'] = {}
ns['metadata']['name'] = 'mynamespace'
v1.create_namespace(ns)

Sadly, the v1 object doesn't authenticate to the cluster with the username / password I've given it:

kubernetes.client.rest.ApiException: (403)
Reason: Forbidden
HTTP response headers: HTTPHeaderDict({'Audit-Id': 'd59bb32d-a114-4b42-90ca-86c6315809d0', Cache-Control': 'no-cache, private', 'Content-Type': 'application/json', 'X-Content-Type-ptions': 'nosniff', 'X-Kubernetes-Pf-Flowschema-Uid': '58a1456a-ff43-47a6-9a08-4a682ad5a509', X-Kubernetes-Pf-Prioritylevel-Uid': 'efbe11a3-861b-46ec-8e4a-1eadb766e284', 'Date': 'Thu, 21 Jan 2021 19:17:31 GMT', 'Content-Length': '273'})
HTTP response body: {"kind":"Status","apiVersion":"v1","metadata":{},"status":"Failure","message":"namespaces is forbidden: User "system:anonymous" cannot create resource "namespaces" in API group "" at the cluster scope","reason":"Forbidden","details":{"kind":"namespaces"},"code":403}

I'm looking for a way to throw configuration YAML at the OCP cluster and have it stick...

question from:https://stackoverflow.com/questions/65834465/managing-openshift-cluster-with-python

Answer 1

Waitting for answers