aws-iam-authenticator: KOPS exec hook fails to set file permissions on kubeconfig - daemonset crashes.
After setting up KOPS cluster config to include the systemd hook for copying the files the pod is crashing on permission denied when attempting to write to the kubeconfig file
time="2018-06-07T11:27:16Z" level=fatal msg="could not write kubeconfig" error="open /etc/kubernetes/heptio-authenticator-aws/kubeconfig.yaml: permission denied" kubeconfigPath=/etc/kubernetes/heptio-authenticator-aws/kubeconfig.yaml
The issues are:
- file permissions is not preserved on S3 after copied to disk
- systemd one shot type exit after the cp so any command after the aws s3 cp will not run
About this issue
- Original URL
- State: closed
- Created 6 years ago
- Comments: 16 (5 by maintainers)
Commits related to this issue
- Merge pull request #90 from kpankonen/monitoring add option to disable enhanced monitoring on workers — committed to joanayma/aws-iam-authenticator by brandonjbjelland 6 years ago
Can anyone here summarize what are the combinations of things that made it work? I’m facing the sam e issue with kops 1.9.1, authenticator 0.3.0.