It seems that "EC"[1] is already supported in Kubernetes client v5.5.0. However, the default value is "RSA". Could you please export the following environment first and have a try again?
export KUBERNETES_CLIENT_KEY_ALGO_SYSTEM_PROPERTY=EC [1]. https://github.com/fabric8io/kubernetes-client/blob/v5.5.0/kubernetes-client/src/main/java/io/fabric8/kubernetes/client/internal/CertUtils.java#L136 Best, Yang Nicolás Ferrario <nferrari...@gmail.com> 于2021年11月12日周五 下午11:05写道： > Hi all, I am trying to run Flink on a K3s cluster and I'm getting this > exception: > > io.fabric8.kubernetes.client.KubernetesClientException: An error has >> occurred. >> >> at >> io.fabric8.kubernetes.client.KubernetesClientException.launderThrowable(KubernetesClientException.java:64) >> >> at >> io.fabric8.kubernetes.client.KubernetesClientException.launderThrowable(KubernetesClientException.java:53) >> >> at >> io.fabric8.kubernetes.client.utils.HttpClientUtils.createHttpClient(HttpClientUtils.java:234) >> >> at >> io.fabric8.kubernetes.client.utils.HttpClientUtils.createHttpClient(HttpClientUtils.java:66) >> >> at >> io.fabric8.kubernetes.client.BaseClient.<init>(BaseClient.java:51) >> >> at >> io.fabric8.kubernetes.client.BaseKubernetesClient.<init>(BaseKubernetesClient.java:145) >> >> at >> io.fabric8.kubernetes.client.DefaultKubernetesClient.<init>(DefaultKubernetesClient.java:40) >> >> at >> org.apache.flink.kubernetes.kubeclient.FlinkKubeClientFactory.fromConfiguration(FlinkKubeClientFactory.java:95) >> >> at >> org.apache.flink.kubernetes.KubernetesClusterClientFactory.createClusterDescriptor(KubernetesClusterClientFactory.java:61) >> >> at >> org.apache.flink.kubernetes.KubernetesClusterClientFactory.createClusterDescriptor(KubernetesClusterClientFactory.java:39) >> >> at >> org.apache.flink.client.deployment.application.cli.ApplicationClusterDeployer.run(ApplicationClusterDeployer.java:63) >> >> at >> org.apache.flink.client.cli.CliFrontend.runApplication(CliFrontend.java:213) >> >> at >> org.apache.flink.client.cli.CliFrontend.parseAndRun(CliFrontend.java:1057) >> >> at >> org.apache.flink.client.cli.CliFrontend.lambda$main$10(CliFrontend.java:1132) >> >> at >> org.apache.flink.runtime.security.contexts.NoOpSecurityContext.runSecured(NoOpSecurityContext.java:28) >> >> at >> org.apache.flink.client.cli.CliFrontend.main(CliFrontend.java:1132) >> >> Caused by: java.io.IOException: Invalid DER: object is not integer >> >> at >> io.fabric8.kubernetes.client.internal.PKCS1Util$Asn1Object.getInteger(PKCS1Util.java:125) >> >> at >> io.fabric8.kubernetes.client.internal.PKCS1Util.next(PKCS1Util.java:55) >> >> at >> io.fabric8.kubernetes.client.internal.PKCS1Util.decodePKCS1(PKCS1Util.java:46) >> >> at >> io.fabric8.kubernetes.client.internal.CertUtils.handleOtherKeys(CertUtils.java:179) >> >> at >> io.fabric8.kubernetes.client.internal.CertUtils.loadKey(CertUtils.java:139) >> >> at >> io.fabric8.kubernetes.client.internal.CertUtils.createKeyStore(CertUtils.java:115) >> >> at >> io.fabric8.kubernetes.client.internal.CertUtils.createKeyStore(CertUtils.java:251) >> >> at >> io.fabric8.kubernetes.client.internal.SSLUtils.keyManagers(SSLUtils.java:128) >> >> at >> io.fabric8.kubernetes.client.internal.SSLUtils.keyManagers(SSLUtils.java:122) >> >> at >> io.fabric8.kubernetes.client.utils.HttpClientUtils.createHttpClient(HttpClientUtils.java:129) >> > > This seems to be an old issue with Fabric8 Kubernetes Client that I guess > should be fixed in newer releases. You can find more information here > https://issues.jenkins.io/browse/JENKINS-64322. > > My K3s cluster is running on version 1.21.6+k3s1, and Flink 1.14.0 > > Does anyone know a workaround that does not involve replacing the > certificate with a token? > > Thanks >
