https://pulumi.com logo
#aws
Title
# aws
a

astonishing-journalist-77684

01/04/2024, 4:50 PM
I've recently run into an issue with preview/up: when it is trying to apply a helm chart, the step where it checks the kubernetes api endpoint to get the version, it fails due to AWS using a self-signed certificate. I am using the latest version of the pulumi CLI (v3.99.0) and all pulumi dependencies have been updated to the latest available package versions. Error:
Copy code
error: Error: invocation of kubernetes:helm:template returned an error: failed to generate YAML for specified Helm chart: could not get server version from Kubernetes: Get "https://<kubernetes api url>/version?timeout=32s": tls: failed to verify certificate: x509: "kube-apiserver" certificate is not standards compliant
Attempted remediations: • restarting the machine to ensure any missing certs from Apple get installed/updated • adding the cert to my trusted certs on my machine • disabling certificate validation for Node (we're using typescript) Any pointers to relevant documentation or advice is appreciated. Thanks!
s

stale-answer-34162

01/04/2024, 6:44 PM
try with v3.10.0
a

astonishing-journalist-77684

01/04/2024, 7:51 PM
thanks, Andrew - I changed my pulumi cli version to 3.10 but got the same error
verified that 3.100 has the same issue as well
it might be tied to a specific npm package version, I'll see if changing the
@pulumi/kubernetes
version to something older works
I believe it's a change in the
@pulumi/eks
package. Working on figuring out the version that causes the issue
looks like going from 1.0.4 to 2.0.0 (I didn't see any intermediate versions without an alpha tag) is where the breaking change occurs
I'll be able to move forward with the older eks dependency and I can report the issue in the repo 👍
l

limited-rainbow-51650

01/05/2024, 7:46 AM
@astonishing-journalist-77684 if it works for
pulumi-eks
v1.0.4 but no longer for v2.0.0, can you please file an issue here? https://github.com/pulumi/pulumi-eks/issues
2 Views