Comments (1)
@kshamajain99 , here are some error which I encounter setup on a cluster
➜ snagal git:(master) ✗ k get Iamrole
NAME STATE ROLENAME RETRYCOUNT LASTUPDATEDTIMESTAMP AGE
iamrole-pfi Error k8s-chaos-ns 1 2020-10-27T19:27:06Z 87m
After following the steps
- kubens iam-manager-system
- kubectl edit cm iam-manager-iamroles-v1alpha1-configmap
- Remove "iam.managed.policies: shared.snagal-eks-k8s-ppd"
Found this error k describe Iamrole iamrole-pfi
`Status:
Error Description: InvalidInput: ARN arn:aws:iam::233444812205:policy/ is not valid.
status code: 400, request id: 060bad11-fbed-4759-ba47-c04b00df9e12
Last Updated Timestamp: 2020-10-27T21:11:47Z
Retry Count: 11
Role Name: k8s-chaos-ns
State: Error
Events:
Type Reason Age From Message
Warning Error 4m47s iam-manager Unable to create/update iam role due to error InvalidInput: ARN arn:aws:iam::233444812205:policy/ is not valid.
status code: 400, request id: bd2f6f82-6312-41d1-965a-5b2723639150
Warning Error 4m46s iam-manager Unable to create/update iam role due to error InvalidInput: ARN arn:aws:iam::233444812205:policy/ is not valid.
status code: 400, request id: e9f9c6a0-c833-4a95-95b5-163abeac6396
Warning Error 4m44s iam-manager Unable to create/update iam role due to error InvalidInput: ARN arn:aws:iam::233444812205:policy/ is not valid.
status code: 400, request id: e63f5bdf-c10d-4038-9700-fa70b22373de`
from iam-manager.
Related Issues (20)
- Support Kubernetes 1.22+ HOT 4
- Update iam-manager golang version
- error: resource mapping not found for name: "iamroles.iammanager.keikoproj.io" namespace: "" from "https://raw.githubusercontent.com/keikoproj/iam-manager/master/hack/iam-manager.yaml": no matches for kind "CustomResourceDefinition" in version "apiextensions.k8s.io/v1beta1" ensure CRDs are installed first
- Update the service account creates a new token every time
- No protection from deleting role managed by two Iamroles
- bug: IAM manager doesn't update trusts when multiple service accounts listed.
- Webhook enablement should be a CLI flag
- Bug: iam.managed.policies is required HOT 1
- Bug: iam.policy.resource.blacklist requires a list of strings
- Bug: Docs say aws.accountId is optional, its not
- Documentation Request: How to correctly run the test suite
- Bug: IAM Trust Policy is not optional in the CM? HOT 2
- Discrepancy between iam.policy.action.prefix.whitelist and AWS permissions boundary HOT 1
- Allow Managed Policy to attach to Individual Role
- Max limit per namespace config not working HOT 3
- MIgrate CI Job to Github Actions from Travis
- Race condition exists on rapid delete/create of Iamroles, or when IAM Role already exists in AWS
- Status update should not requeue request for the reconciliation
- ServiceAccount resource is not considered as part of the reconciliation loop
- ServiceAccounts should be annotated with sts-regional-endpoints for HA HOT 3
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from iam-manager.