Helm 安装 Rancher 过程中 403 的解决方案 | 因使用公网 IP 请求被 Cloudflare 拦截
问题描述
今天使用 Helm 安装 Rancher 过程中，突然报 failed to download
➜ nginx-ingress helm install rancher rancher-latest/rancher --logtostderr \
--namespace cattle-system \
--set hostname=rancher.local.wwj.icu
Error: failed to download "rancher-latest/rancher" (hint: running `helm repo update` may help)
helm 增加 --debug 参数，看到是因为访问 https://releases.rancher.com 403 了。
使用浏览器打开，发现被 Cloudflare 拦截了请求，需要验证。浏览器验证后，可以访问，但命令行没有办法进行验证。
➜ rancher helm install rancher rancher-latest/rancher \
--namespace cattle-system \
--set hostname=rancher.local.wwj.icu
install.go:159: [debug] Original chart version: ""
Error: failed to fetch https://releases.rancher.com/server-charts/latest/rancher-2.4.5.tgz : 403 Forbidden
helm.go:84: [debug] failed to fetch https://releases.rancher.com/server-charts/latest/rancher-2.4.5.tgz : 403 Forbidden
helm.sh/helm/v3/pkg/getter.(*HTTPGetter).get
/home/circleci/helm.sh/helm/pkg/getter/httpgetter.go:73
helm.sh/helm/v3/pkg/getter.(*HTTPGetter).Get
/home/circleci/helm.sh/helm/pkg/getter/httpgetter.go:41
helm.sh/helm/v3/pkg/downloader.(*ChartDownloader).DownloadTo
/home/circleci/helm.sh/helm/pkg/downloader/chart_downloader.go:97
helm.sh/helm/v3/pkg/action.(*ChartPathOptions).LocateChart
/home/circleci/helm.sh/helm/pkg/action/install.go:667
main.runInstall
/home/circleci/helm.sh/helm/cmd/helm/install.go:171
main.newInstallCmd.func1
/home/circleci/helm.sh/helm/cmd/helm/install.go:117
github.com/spf13/cobra.(*Command).execute
/go/pkg/mod/github.com/spf13/[email protected]/command.go:842
github.com/spf13/cobra.(*Command).ExecuteC
/go/pkg/mod/github.com/spf13/[email protected]/command.go:950
github.com/spf13/cobra.(*Command).Execute
/go/pkg/mod/github.com/spf13/[email protected]/command.go:887
main.main
/home/circleci/helm.sh/helm/cmd/helm/helm.go:83
runtime.main
/usr/local/go/src/runtime/proc.go:203
runtime.goexit
/usr/local/go/src/runtime/asm_amd64.s:1357
由于机器目前无法切换网络，难道命令行只能这么被拦截了？
解决方案
以 rancher-latest v2.4.5 仓库为例，在浏览器手动下载以下文件：
- https://releases.rancher.com/server-charts/latest/index.yaml
- https://releases.rancher.com/server-charts/latest/rancher-2.4.5.tgz
以 http 的形式提供这两个文件，例如：
- https://wuweijie.oss-cn-shenzhen.aliyuncs.com/kubernetes/rancher/index.yaml
- https://wuweijie.oss-cn-shenzhen.aliyuncs.com/kubernetes/rancher/rancher-2.4.5.tgz
添加到 helm 仓库：
helm repo add rancher-latest-private https://wuweijie.oss-cn-shenzhen.aliyuncs.com/kubernetes/rancher
使用刚才添加的仓库安装：
helm install rancher rancher-latest-private/rancher \
--namespace cattle-system \
--set hostname=rancher.local.wwj.icu
问题解决！