Kubernetes REST API - 未经授权

Question

I have following Kubernetes REST API request

GET https://theserver/api/v1/pods?includeUninitialized=true

and included following HTTP Headers in the request:

Authorization: Basic ***************
Accept: application/json, */*
User-Agent: kubectl.exe/v1.13.0 (windows/amd64) kubernetes/ddf47ac

Result is the following error

{
    "kind": "Status",
    "apiVersion": "v1",
    "metadata": {},
    "status": "Failure",
    "message": "Unauthorized",
    "reason": "Unauthorized",
    "code": 401
}

I already tried the following:

• Analog kubectl request "kubectl describe pods --all-namespaces" works fine (but I need REST)
• Used "--v=12" parameter as in newkind101's comment to Kubernetes REST API to see the underlying REST API calls - looks same as mine
• Read Kubernetes Documentation - but I failed to find detail information which HTTP headers or/and HTTP body values to send to authenticate properly (few thing I could retrieve from curl sample calls in that docs)
• I read Access Kubernetes API using REST APIs but want to understand my issue before I use a framework like GoDaddy

kubectl seems to do a bit more than I can see with the "--v=12" parameter. This bit is likely connected to things in ".kube/config" file. Still I don't know what exactly and where to put in my HTTP request.

Answer 1

据我所知，默认情况下基本身份验证方法是禁用的，需要通过在 API 服务器配置中添加--basic-auth-file标志来启用，因此对 REST API 的所有请求都被标识为匿名用户，可能会导致401 Unauthorized错误。