question-mark
Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Deploying to EKS, need credentials passed

See original GitHub issue

Hi there, I am attempting to deploy some helm chart to my EKS cluster. In order to do that, I believe I have configured aws-iam-authenticator properly, since I get the following log:

helm upgrade seed-java helm/seed-java --install --wait --atomic --namespace=feat-SYS-1027-CD-core-dev --set=app.name=seed-java --values=./values.yml
could not get token: NoCredentialProviders: no valid providers in chain. Deprecated.
	For verbose messaging see aws.Config.CredentialsChainVerboseErrors

Which is created by:

 51          uses: 'deliverybot/helm@master'
 52          with:
 53            namespace: ${{ steps.helmvars.outputs.namespace}}
 54            chart: ${{steps.helmvars.outputs.chart}}
 55            token: ${{ github.token }}
 56            value_files: "[ ${{steps.helmvars.outputs.values_static}}, ${{steps.helmvars.outputs.values_ns}}]"
 57            helm: 'helm'
 58            release: ${{ steps.helmvars.outputs.release }}
 59          env:
 60            KUBECONFIG_FILE: '${{ secrets.KUBECONFIG }}'

Does this mean that the AWS_ACCESS_KEY_ID etc are not being properly passed into the container that is being executed? I am at a bit of a loss.

I know that the credentials work, and are available to prior steps in the workflow, since I push the containers I seek to deploy to ECR.

Any ideas?

Thanks!

Issue Analytics

  • State:open
  • Created 4 years ago
  • Comments:8 (2 by maintainers)

github_iconTop GitHub Comments

1reaction
rvicherycommented, Apr 1, 2020

We are facing a similar issue, it seems that the Docker image should include the aws-cli so it can execute the get-token within the kubeconfig. I am going to experiment in my own fork, will update here if it works and word with the maintainer to see if we can create another version of this action with support for EKS.

0reactions
rvicherycommented, Apr 2, 2020

@aheifetz the PR has been merged to master. So you should be able to test directly from this repository.

Read more comments on GitHub >

github_iconTop Results From Across the Web

IAM roles for service accounts - Amazon EKS
Credential isolation – A pod's containers can only retrieve credentials for the IAM role that's associated with the service account that the container...
Read more >
Deploying Pega Platform on an Amazon EKS cluster
Prepare your Amazon EKS resources – 45 minutes. This section covers the details necessary to obtain your AWS credentials and configure the required...
Read more >
EKS Authentication: Part 1 - Lightspin Blog
In AWS EKS, you have no access to the master nodes (the nodes that ... However, we didn't pass our credentials (AWS Access...
Read more >
How to deploy an EKS cluster using Terraform | TechTarget
an AWS account; · identity and access management (IAM) credentials and programmatic access; · AWS credentials that are set up locally with aws ......
Read more >
AWS EKS Tutorial | Create EKS Step by Step for Beginners
What if we have to deploy, manage, and scale applications using Kubernetes on AWS Platform? Amazon EKS helps to do all this!
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Dev.to Post

No results found

github_iconTop Related Hashnode Post

No results found