https://pulumi.com logo
Title
p

proud-pizza-80589

05/24/2023, 3:37 PM
Hmm, i have 2 pulumi deployed EKS clusters, one in the japan and one in the singapore region where i can no longer run updates error: Error: Cannot retrieve the certificate fingerprint at the issuer URL: https://oidc.eks.ap-northeast-3.amazonaws.com at /Users/roderik/Development/bpaas/node_modules/.pnpm/@pulumi+eks@1.0.2_@swc+core@1.3.59_@types+node@18.16.14/node_modules/@pulumi/cert-thumprint.ts:127:11 at Generator.throw (<anonymous>) at rejected (/Users/roderik/Development/bpaas/node_modules/.pnpm/@pulumi+eks@1.0.2_@swc+core@1.3.59_@types+node@18.16.14/node_modules/@pulumi/eks/cert-thumprint.js:19:65) at processTicksAndRejections (node:internal/process/task_queues:95:5) the same cluster code (different stacks) in other regions still works and updates. So clearly a south east asia problem. Anyone have an idea?
t

tall-library-51128

05/24/2023, 3:50 PM
I haven't used
pulumi_eks
in a while (moved to
pulumi_aws
) but shouldn't the URL above be in this format ?
<https://oidc.eks.ap-northeast-3.amazonaws.com/id/><id>
or you redacted the value ?
p

proud-pizza-80589

05/24/2023, 3:51 PM
no, this is just the pulumi output
the stack export has the right urls and ids
trying to add some debugging code
Error [ERR_SOCKET_CONNECTION_TIMEOUT]: Socket connection timeout
        at new NodeError (node:internal/errors:399:5)
        at internalConnectMultiple (node:net:1099:20)
        at Timeout.internalConnectMultipleTimeout (node:net:1638:3)
        at listOnTimeout (node:internal/timers:575:11)
        at processTimers (node:internal/timers:514:7) {
      code: 'ERR_SOCKET_CONNECTION_TIMEOUT'
    }
t

tall-library-51128

05/24/2023, 3:56 PM
I see, you're onto something here. Private Endpoint maybe ?
p

proud-pizza-80589

05/24/2023, 3:56 PM
no, nothing, and i can curl the full url with id from my computer (403 error but no connection issue)
ok, i accidentally switched to node 20, switched to 18 and it works now
t

tall-library-51128

05/24/2023, 4:01 PM
sorry, you mean Node js
🙂
p

proud-pizza-80589

05/24/2023, 4:01 PM
😉 not sure what changed in node 20 to cause this
t

tall-library-51128

05/24/2023, 4:02 PM
good luck! I gave
pulumi_eks
a try last year and ended up using plain
pulumi_aws
so in the case above I would run
pulumi_tls
to get the fingerprint.
p

proud-pizza-80589

05/24/2023, 4:04 PM
don't actually need node 20, was messign with my zsh config and my aliasses were gone