Plugin autentikasi yang tidak digunakan lagi untuk klien Kubernetes
Tetap teratur dengan koleksi
Simpan dan kategorikan konten berdasarkan preferensi Anda.
Pada Kubernetes versi 1.22, project Kubernetes tidak lagi menggunakan mekanisme autentikasi bawaan yang digunakan oleh klien, seperti alat command line kubectl untuk mengakses server Kubernetes API. Mekanisme autentikasi bawaan dijadwalkan untuk dihapus di Kubernetes 1.26. Untuk mengetahui konteksnya, lihat GitHub PR 102181.
Penghapusan ini tidak memengaruhi operator yang di-deploy di cluster dan menggunakan akun layanan Kubernetes untuk berkomunikasi dengan server API.
Apa yang perlu Anda lakukan?
GKE telah merilis plugin autentikasi yang telah diupdate, yaitu gke-gcloud-auth-plugin. Plugin ini menggunakan framework
Plugin Kredensial client-go
untuk memberikan token autentikasi agar dapat berkomunikasi dengan
cluster GKE.
Anda harus menginstal plugin sebelum mengupdate klien command line
ke versi 1.26 dan yang lebih baru. Jika tidak menginstal plugin, Anda akan melihat pesan error seperti berikut.
Contoh error: Penyedia autentikasi tidak ditemukan
Unable to connect to the server: getting credentials: exec: executable gke-gcloud-auth-plugin not found
panic: no Auth Provider found for name gcp
Contoh error: gke-cloud-auth-plugin yang dapat dieksekusi tidak ditemukan
Unable to connect to the server: getting credentials: exec: executable gke-gcloud-auth-plugin not found
It looks like you are trying to use a client-go credential plugin that is not installed.
To learn more about this feature, consult the documentation available at:
https://kubernetes.io/docs/reference/access-authn-authz/authentication/#client-go-credential-plugins
Install gke-gcloud-auth-plugin for use with kubectl by following \
https://cloud.google.com/blog/products/containers-kubernetes/kubectl-auth-changes-in-gke.
[[["Mudah dipahami","easyToUnderstand","thumb-up"],["Memecahkan masalah saya","solvedMyProblem","thumb-up"],["Lainnya","otherUp","thumb-up"]],[["Sulit dipahami","hardToUnderstand","thumb-down"],["Informasi atau kode contoh salah","incorrectInformationOrSampleCode","thumb-down"],["Informasi/contoh yang saya butuhkan tidak ada","missingTheInformationSamplesINeed","thumb-down"],["Masalah terjemahan","translationIssue","thumb-down"],["Lainnya","otherDown","thumb-down"]],["Terakhir diperbarui pada 2025-07-31 UTC."],[],[],null,["# Deprecated authentication plugin for Kubernetes clients\n\n*** ** * ** ***\n\nIn Kubernetes version 1.22, the Kubernetes project deprecated the built-in\nauthentication mechanism used by clients such as the `kubectl` command-line tool\nto access the Kubernetes API server. The built-in authentication mechanism is\nscheduled for removal in Kubernetes 1.26. For context, refer to\n[GitHub PR 102181](https://github.com/kubernetes/kubernetes/pull/102181).\n\nThe removal doesn't affect operators that are deployed in the cluster and use\nKubernetes service accounts to communicate with the API server.\n\nWhat should you do?\n-------------------\n\nGKE released an updated authentication plugin,\n`gke-gcloud-auth-plugin`. This plugin uses the\n[client-go Credential Plugins](https://kubernetes.io/docs/reference/access-authn-authz/authentication/#client-go-credential-plugins)\nframework to provide authentication tokens to communicate with\nGKE clusters.\n\nYou must install the plugin before you update your command-line clients\nto version 1.26 and later. If you don't install the plugin, you'll notice an\nerror message similar to the following.\n\nFor instructions, refer to\n[Install required plugins](/kubernetes-engine/docs/how-to/cluster-access-for-kubectl#install_plugin).\n\n### Example error: No auth provider found\n\n Unable to connect to the server: getting credentials: exec: executable gke-gcloud-auth-plugin not found\n\n panic: no Auth Provider found for name gcp\n\n### Example error: Executable gke-cloud-auth-plugin not found\n\n Unable to connect to the server: getting credentials: exec: executable gke-gcloud-auth-plugin not found\n\n It looks like you are trying to use a client-go credential plugin that is not installed.\n\n To learn more about this feature, consult the documentation available at:\n https://kubernetes.io/docs/reference/access-authn-authz/authentication/#client-go-credential-plugins\n\n Install gke-gcloud-auth-plugin for use with kubectl by following \\\n https://cloud.google.com/blog/products/containers-kubernetes/kubectl-auth-changes-in-gke."]]
