https://pulumi.com logo
Join Slack
Powered by
Hmm, i have 2 pulumi deployed EKS clusters, one in...
# aws
p
Hmm, i have 2 pulumi deployed EKS clusters, one in the japan and one in the singapore region where i can no longer run updates error: Error: Cannot retrieve the certificate fingerprint at the issuer URL: https://oidc.eks.ap-northeast-3.amazonaws.com at /Users/roderik/Development/bpaas/node_modules/.pnpm/@pulumi+eks@1.0.2_@swc+core@1.3.59_@types+node@18.16.14/node_modules/@pulumi/cert-thumprint.ts12711 at Generator.throw (<anonymous>) at rejected (/Users/roderik/Development/bpaas/node_modules/.pnpm/@pulumi+eks@1.0.2_@swc+core@1.3.59_@types+node@18.16.14/node_modules/@pulumi/eks/cert-thumprint.js1965) at processTicksAndRejections (nodeinternal/process/task queues95:5) the same cluster code (different stacks) in other regions still works and updates. So clearly a south east asia problem. Anyone have an idea?
t
I haven't used 
pulumi_eks
in a while (moved to 
pulumi_aws
) but shouldn't the URL above be in this format ? 
<https://oidc.eks.ap-northeast-3.amazonaws.com/id/><id>
or you redacted the value ?
p
no, this is just the pulumi output
the stack export has the right urls and ids
trying to add some debugging code
Copy code
Error [ERR_SOCKET_CONNECTION_TIMEOUT]: Socket connection timeout
        at new NodeError (node:internal/errors:399:5)
        at internalConnectMultiple (node:net:1099:20)
        at Timeout.internalConnectMultipleTimeout (node:net:1638:3)
        at listOnTimeout (node:internal/timers:575:11)
        at processTimers (node:internal/timers:514:7) {
      code: 'ERR_SOCKET_CONNECTION_TIMEOUT'
    }
t
I see, you're onto something here. Private Endpoint maybe ?
p
no, nothing, and i can curl the full url with id from my computer (403 error but no connection issue)
ok, i accidentally switched to node 20, switched to 18 and it works now
t
sorry, you mean Node js
🙂
p
😉 not sure what changed in node 20 to cause this
t
good luck! I gave 
pulumi_eks
a try last year and ended up using plain 
pulumi_aws
so in the case above I would run 
pulumi_tls
to get the fingerprint.
p
don't actually need node 20, was messign with my zsh config and my aliasses were gone
g
asdf
is your friend!
p
trying out volta now, also looks cool
27 Views
Open in Slack
PreviousNext
Powered by