Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

eksctl update addon with version: latest and useDefaultPodIdentityAssociations fails #7841

Open
cPu1 opened this issue Jun 18, 2024 · 2 comments
Labels
area/podidentity kind/bug priority/important-longterm Important over the long term, but may not be currently staffed and/or may require multiple releases

Comments

@cPu1
Copy link
Collaborator

cPu1 commented Jun 18, 2024

From a user on Slack:

eksctl update addon fails for this config file:

apiVersion: eksctl.io/v1alpha5
kind: ClusterConfig
availabilityZones:
  - us-east-1a
  - us-east-1b
  - us-east-1c
metadata:
  name: cluster-79
  region: us-east-1
  version: "1.28"
addons:
  - name: eks-pod-identity-agent
  - name: aws-ebs-csi-driver
    podIdentityAssociations:
    - serviceAccountName: ebs-csi-controller-sa
      namespace: kube-system
      permissionPolicyARNs: ["arn:aws:iam::XXXXXXXXXXXX:policy/ebs-csi-policy"]
  - name: vpc-cni
    version: latest
    useDefaultPodIdentityAssociations: true

2024-06-18 13:45:07 [ℹ] Kubernetes version "1.28" in use by cluster "cluster-79"
2024-06-18 13:45:08 [ℹ] no new version provided, preserving existing version: v1.2.0-eksbuild.1
2024-06-18 13:45:08 [ℹ] updating addon
2024-06-18 13:45:19 [ℹ] addon "eks-pod-identity-agent" active
2024-06-18 13:45:20 [ℹ] no new version provided, preserving existing version: v1.31.0-eksbuild.1
2024-06-18 13:45:21 [ℹ] updating IAM resources stack "eksctl-cluster-79-addon-aws-ebs-csi-driver-podidentityrole-ebs-csi-controller-sa" for pod identity association "a-xpaah4j4xsvt9af6l"
2024-06-18 13:45:22 [ℹ] waiting for CloudFormation changeset "eksctl-kube-system-ebs-csi-controller-sa-update-1718714721" for stack "eksctl-cluster-79-addon-aws-ebs-csi-driver-podidentityrole-ebs-csi-controller-sa"
2024-06-18 13:45:22 [ℹ] nothing to update
2024-06-18 13:45:22 [ℹ] IAM resources for kube-system/ebs-csi-controller-sa (pod identity association ID: a-xpaah4j4xsvt9af6l) are already up-to-date
2024-06-18 13:45:22 [ℹ] updating addon
2024-06-18 13:46:04 [ℹ] addon "aws-ebs-csi-driver" active

Error: getting recommended policies for addon vpc-cni


eksctl needs to resolve the keyword latest to the latest version before attempting to describe recommended policies for an addon.

Copy link
Contributor

This issue is stale because it has been open 30 days with no activity. Remove stale label or comment or this will be closed in 5 days.

@github-actions github-actions bot added the stale label Jul 20, 2024
@TiberiuGC TiberiuGC added priority/important-longterm Important over the long term, but may not be currently staffed and/or may require multiple releases and removed stale labels Jul 22, 2024
@stevejr
Copy link

stevejr commented Oct 18, 2024

This is also failing on the latest version of eksctl - is there any update on when this can be fixed?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/podidentity kind/bug priority/important-longterm Important over the long term, but may not be currently staffed and/or may require multiple releases
Projects
None yet
Development

No branches or pull requests

3 participants