aws-iam-authenticator: Constructing many clients error

Hello all, recently we’ve enabled aws-iam-authenticator and I’m seeing an error message whenever I run anything that uses --all-namespaces (i.e. kubectl --context cluster get pods --all-namespaces).

The error message in question is:

W0407 12:20:16.744257   32782 exec.go:203] constructing many client instances from the same exec auth config can cause performance problems during cert rotation and can exhaust available network connections; 1001 clients constructed calling "aws-iam-authenticator"

kubectl version v1.18.0 aws-iam-auth version: {“Version”:“v0.5.0”,“Commit”:“1cfe2a90f68381eacd7b6dcfa2bf689e76eb8b4b”} OSX: 10.14.6

About this issue

Original URL
State: closed
Created 4 years ago
Reactions: 9
Comments: 18 (4 by maintainers)

Most upvoted comments

/reopen This is still an issue Nothing has been resolved.

+19

HeavensRegent on Nov 5, 2020

This warning appears continuously when running https://github.com/vmware-tanzu/octant

sysadmiral on Sep 28, 2020

My errors looked like this:

W0902 17:12:19.796919   25579 exec.go:203] constructing many client instances from the same exec auth config can cause performance problems during cert rotation and can exhaust available network connections; 1384 clients constructed calling "aws-iam-authenticator"

So I just filtered it out with grep, but this is quite hacky:

$ kubectl describe pods 2>&1 | grep -v W0902

max-rocket-internet on Sep 2, 2020

Seeing this (slightly different message so adding for Google) when using aws to load data from S3 in initContainer:

connections; 1377 clients constructed calling "aws"
W1218 16:36:11.240927 1982077 exec.go:271] constructing many client instances from the same exec auth config can cause performance problems during cert rotation and can exhaust available network
connections; 1378 clients constructed calling "aws"
W1218 16:36:11.240941 1982077 exec.go:271] constructing many client instances from the same exec auth config can cause performance problems during cert rotation and can exhaust available network
connections; 1379 clients constructed calling "aws"

mooreniemi on Dec 18, 2020