用 Python 给 Kubernetes 写个控制器 主讲人： 张晋涛 个人介绍 Apache APISIX PMC Kubernetes Ingress NGINX maintainer Microsoft MVP 『 K8S 生态周报』发起人和维护者 GitHub：tao12345666333 Mail: zhangjintao@apache.org Agenda

"lib/python3.7/site-packages/fun-packge/__init__.py", "path_type": "hardlink", "sha256": "76f3b6e34feeb651aff33ca59e0279c4eadce5a50c6ad93b961c846f7ba717e9", "size_in_bytes": 2067 (continues on next page) 1.1. Concepts package requires the setting of REQUESTS_CA_BUNDLE. If you receive an error with self-signed certifications, you may consider unsetting REQUESTS_CA_BUNDLE as well as CURL_CA_BUNDLE and disabling SSL verification of certificates. The uppermost (aka top line in window) is the root certificate (e.g. Zscaler Root CA). • Open macOS keychain, click on «Certificates» and choose among the many certificates the root certificate

"lib/python3.7/site-packages/fun-packge/__init__.py", "path_type": "hardlink", "sha256": "76f3b6e34feeb651aff33ca59e0279c4eadce5a50c6ad93b961c846f7ba717e9", "size_in_bytes": 2067 (continues on next page) 1.1. Concepts package requires the setting of REQUESTS_CA_BUNDLE. If you receive an error with self-signed certifications, you may consider unsetting REQUESTS_CA_BUNDLE as well as CURL_CA_BUNDLE and disabling SSL verification of certificates. The uppermost (aka top line in window) is the root certificate (e.g. Zscaler Root CA). • Open macOS keychain, click on «Certificates» and choose among the many certificates the root certificate

The value for # # ssl_verify can also be (1) a path to a CA bundle file, or (2) a path # # to a directory containing certificates of trusted CA. # # # ssl_verify: true 52 Chapter 1. User guide conda The value for # # ssl_verify can also be (1) a path to a CA bundle file, or (2) a path # # to a directory containing certificates of trusted CA. # # # ssl_verify: true Your network administrator can for your network’s firewall. Then ssl_verify can be set to the path of that certificate authority (CA) bundle, and package installation operations will complete without connection errors. When using conda

The value for # # ssl_verify can also be (1) a path to a CA bundle file, or (2) a path # # to a directory containing certificates of trusted CA. # # # ssl_verify: true 52 Chapter 1. User guide conda The value for # # ssl_verify can also be (1) a path to a CA bundle file, or (2) a path # # to a directory containing certificates of trusted CA. # # # ssl_verify: true Your network administrator can for your network’s firewall. Then ssl_verify can be set to the path of that certificate authority (CA) bundle, and package installation operations will complete without connection errors. When using conda

package requires the setting of REQUESTS_CA_BUNDLE. If you receive an error with self-signed certifications, you may consider unsetting REQUESTS_CA_BUNDLE as well as CURL_CA_BUNDLE and disabling SSL verification of certificates. The uppermost (aka top line in window) is the root certificate (e.g. Zscaler Root CA). • Open macOS keychain, click on «Certificates» and choose among the many certificates the root certificate certificate: export REQUESTS_CA_BUNDLE=/path/to/ converted/certificate.pem • To set this permanently, open your shell profile (e.g. .bashrc or .zshrc) and add this line: export REQUESTS_CA_BUNDLE=/path/to/converted/certificate

package requires the setting of REQUESTS_CA_BUNDLE. If you receive an error with self-signed certifications, you may consider unsetting REQUESTS_CA_BUNDLE as well as CURL_CA_BUNDLE and disabling SSL verification of certificates. The uppermost (aka top line in window) is the root certificate (e.g. Zscaler Root CA). • Open macOS keychain, click on «Certificates» and choose among the many certificates the root certificate certificate: export REQUESTS_CA_BUNDLE=/path/to/ converted/certificate.pem • To set this permanently, open your shell profile (e.g. .bashrc or .zshrc) and add this line: export REQUESTS_CA_BUNDLE=/path/to/converted/certificate

package requires the setting of REQUESTS_CA_BUNDLE. If you receive an error with self-signed certifications, you may consider unsetting REQUESTS_CA_BUNDLE as well as CURL_CA_BUNDLE and disabling SSL verification of certificates. The uppermost (aka top line in window) is the root certificate (e.g. Zscaler Root CA). • Open macOS keychain, click on «Certificates» and choose among the many certificates the root certificate certificate: export REQUESTS_CA_BUNDLE=/path/to/ converted/certificate.pem • To set this permanently, open your shell profile (e.g. .bashrc or .zshrc) and add this line: export REQUESTS_CA_BUNDLE=/path/to/converted/certificate

"lib/python3.7/site-packages/fun-packge/__init__.py", "path_type": "hardlink", "sha256": "76f3b6e34feeb651aff33ca59e0279c4eadce5a50c6ad93b961c846f7ba717e9", "size_in_bytes": 2067 (continues on next page) 1.1. Concepts package requires the setting of REQUESTS_CA_BUNDLE. If you receive an error with self-signed certifications, you may consider unsetting REQUESTS_CA_BUNDLE as well as CURL_CA_BUNDLE and disabling SSL verification of certificates. The uppermost (aka top line in window) is the root certificate (e.g. Zscaler Root CA). • Open macOS keychain, click on «Certificates» and choose among the many certificates the root certificate

proxy_username=None, proxy_password=None, proxy_auth_mode=None, allow_nonstandard_methods=None, validate_cert=None, ca_certs=None, allow_ipv6=None, client_key=None, client_cert=None, body_producer=None, expect_100_continue=False inherited by subsequent fetches because pycurl does not allow them to be cleanly reset. This applies to the ca_certs, client_key, client_cert, and network_interface arguments. If you use these options, you should validate the server’s certificate? Default is True. ca_certs (string [https://docs.python.org/3.5/library/string.html#module- string]) – filename of CA certificates in PEM format, or Non to use defaults