连接到在Google Container Engine (node.js)上创建的Kubernetes apisserv

Question

我已经通过googleapi nodejs客户端成功连接到容器引擎，并获得集群对象返回(根据这里的文档)，并将masterAuth对象保存到磁盘上的json文件中。但是，我仍然不知道如何向apisserver发出经过身份验证的请求:

var request = require("request");
var key = require("path/to/key/json");
var options = {
    url: "https://IPofKubernetesCluster/api/v1/endpoints",
    cert: key.clientCertificate,
    ca: key.clusterCaCertificate,
    key: key.clientKey,
    passphrase: null
};
request.get(options, function(e, r, body) {});

代码失败，出现以下错误:

crypto.js:131
      c.context.setKey(options.key);
            ^
Error: error:0906D06C:PEM routines:PEM_read_bio:no start line
    at Object.exports.createCredentials (crypto.js:131:17)
    at Object.exports.connect (tls.js:1345:27)
    at Agent.createConnection (https.js:79:14)
    at Agent.createSocket (http.js:1294:16)
    at Agent.addRequest (http.js:1270:23)
    at new ClientRequest (http.js:1417:16)
    at Object.exports.request (https.js:123:10)
    at Request.start(node_modules/request/request.js:793:30)
    at Request.end (node_modules/request/request.js:1400:10)
    at end (node_modules/request/request.js:564:14)

Answer 1

MasterAuth结构包括base64编码的客户端和集群证书。在将字符串传递到http客户端库之前，您需要将它们解码回PEM格式。