Give docker container internet access

2br-2b · November 26, 2024, 1:51pm

Hello! I’m working on deploying a python docker container to Kubernetes, but I keep getting this error when the bot tries to connect to Discord:

aiohttp.client_exceptions.ClientConnectorCertificateError: Cannot connect to host discord.com:443 ssl:True [SSLCertVerificationError: (1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: EE certificate key too weak (_ssl.c:1006)')]

How can I give the docker container access to the wider internet? I don’t believe it’s a problem with the certs, since I have it running fine on ubuntu, unless there’s a substantial difference between debian/ubuntu’s networking. Since it’s running in a docker container, however, I am guessing this isn’t the issue?

Here are the files I’m using:

gist.github.com

https://gist.github.com/2br-2b/19dc385de561adf0197c4e8468eb613a

Dockerfile

FROM python:3.11

WORKDIR /app

RUN apt-get update
RUN apt-get install ca-certificates

RUN pip install --no-cache-dir discord.py

COPY temp-bot.py /app/main.py

This file has been truncated. show original

deployment.yaml

apiVersion: apps/v1
kind: Deployment
metadata:
  name: storybot-tempbot
  namespace: default
spec:
  replicas: 1
  selector:
    matchLabels:
      node-role.kubernetes.io/node: node

This file has been truncated. show original

temp-bot.py

import truststore

truststore.inject_into_ssl()

import os

import discord
from discord.ext import commands

# For use when the computer will be offline

This file has been truncated. show original

My hope is to eventually host some websites on this cluster, so I need to make sure incoming and outgoing traffic can still be routed like that in the future. I’m still learning, however, so I haven’t finished setting up nginx to handle that.

Thank you so much! Have a wonderful day!

Cluster information:

Kubernetes version:1.30.6+k3s1
Cloud being used: bare-metal
Installation method: curl -sfL https://get.k3s.io | sh -
Host OS: Debian
CNI and version: I don’t know
CRI and version: I don’t know

Topic		Replies	Views
Need assitance with this 509 certificate error General Discussions	0	609	August 1, 2023
Containers unable to reach external url's because of self signed certificates General Discussions	1	454	April 28, 2022
404 Not found after configuration of SSL certificate with Cert Bot and Nginx in Kubernetes General Discussions	2	435	February 16, 2024
Allow K8S container to talk to Docker container outside of its cluster General Discussions development , minikube	0	539	November 15, 2021
Getting ssl validation errors inside microK8s pod microk8s	0	699	May 25, 2021

Give docker container internet access

Cluster information:

Related topics