Python: unable to access kubernetes api from within pod with python client, can do so with curl

Created on 7 Oct 2019 · 1Comment · Source: kubernetes-client/python

What happened (please include outputs or screenshots):

I am able to access the kubernetes API from within the pod via curl

KUBE_TOKEN=$(cat /var/run/secrets/kubernetes.io/serviceaccount/token) && curl -sSk -H "Authorization: Bearer $KUBE_TOKEN" https://$KUBERNETES_SERVICE_HOST:$KUBRNETES_PORT_443_TCP_PORT/api/v1/namespaces -I
However doing the same with the python client it will hang and crash the pod

What you expected to happen:

A list of namespaces is returned

How to reproduce it (as minimally and precisely as possible):
Enter your pod with
kubectl exec -it /bin/bash

Run this script to replicate the curl command

with open('/var/run/secrets/kubernetes.io/serviceaccount/token') as f:
    token = f.read()

host = os.environ['KUBERNETES_SERVICE_HOST']

configuration = kubernetes.client.Configuration()
configuration.api_key['authorization'] = token
configuration.host = host

api_instance = kubernetes.client.CoreV1Api(kubernetes.client.ApiClient(configuration))
pretty = 'pretty_example' # str | If 'true', then the output is pretty printed. (optional)

try: 
    api_response = api_instance.list_namespace(pretty=pretty, timeout_seconds=3)
    pprint(api_response)
except ApiException as e:
    print("Exception when calling CoreV1Api->list_namespace: %s\n" % e)

Anything else we need to know?:

Environment:

Kubernetes version (kubectl version):
Client Version: version.Info{Major:"1", Minor:"10", GitVersion:"v1.10.0", GitCommit:"fc32d2f3698e36b93322a3465f63a14e9f0eaead", GitTreeState:"clean", BuildDate:"2018-03-26T16:55:54Z", GoVersion:"go1.9.3", Compiler:"gc", Platform:"linux/amd64"} Server Version: version.Info{Major:"1", Minor:"13+", GitVersion:"v1.13.7-gke.24", GitCommit:"2ce02ef1754a457ba464ab87dba9090d90cf0468", GitTreeState:"clean", BuildDate:"2019-08-12T22:05:28Z", GoVersion:"go1.11.5b4", Compiler:"gc", Platform:"linux/amd64"}