kubernetes_log error for self signed certificate

[yuanqixun]

A note for the community

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment

Problem

I deployed a vector daemonset in my kubernetes cluster. but when i see the log output, i get error bellow:

2022-12-02T16:11:08.077716Z  WARN vector::kubernetes::reflector: Watcher Stream received an error. Retrying. error=InitialListFailed(HyperError(hyper::Error(Connect, Ssl(Error { code: ErrorCode(1), cause: Some(Ssl(ErrorStack([Error { code: 337047686, library: "SSL routines", function: "tls_process_server_certificate", reason: "certificate verify failed", file: "ssl/statem/statem_clnt.c", line: 1919 }]))) }, X509VerifyResult { code: 18, error: "self signed certificate" }))))
2022-12-02T16:11:08.077763Z DEBUG HTTP{http.method=GET http.url=https://kubernetes.default.svc/api/v1/namespaces?&labelSelector=vector.dev%2Fexclude%21%3Dtrue otel.name="list" otel.kind="client"}: kube_client::client::builder: requesting
2022-12-02T16:11:08.084769Z ERROR HTTP{http.method=GET http.url=https://kubernetes.default.svc/api/v1/pods?&fieldSelector=spec.nodeName%3D172.16.0.54&labelSelector=vector.dev%2Fexclude%21%3Dtrue otel.name="list" otel.kind="client" otel.status_code="ERROR"}: kube_client::client::builder: failed with error error trying to connect: error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:ssl/statem/statem_clnt.c:1919: (self signed certificate)

my k8s cluster is deployed by self signed certificate.
how can i config vector to ignore he ssl verify?

Configuration

my configmap content is :

apiVersion: v1
kind: ConfigMap
metadata:
  name: vector
  labels:
    app.kubernetes.io/name: vector
    app.kubernetes.io/instance: vector
    app.kubernetes.io/component: Agent
    app.kubernetes.io/version: "0.24.0-alpine"
data:
  agent.yaml: |
    data_dir: /vector-data-dir
    api:
      enabled: false
      address: 127.0.0.1:8686
      playground: false
    sources:
      kubernetes_logs:
        type: kubernetes_logs
    sinks:
      stdout:
        type: console
        inputs: [kubernetes_logs]
        encoding:
          codec: json

Version

vector 0.24.0 (x86_64-unknown-linux-musl 43267b9 2022-08-30)

Debug Output

No response

Example Data

No response

Additional Context

No response

References

No response

[jszwedko]

Hi @yuanqixun !

I'm not a Kubernetes expert but I think you may be able resolve this by providing a custom kube config file that either disables TLS verification or that points to the self-signed certificate for verification. You can provide this config file to Vector using the kube_config_file.