Hi, in my eks cluster roleMapping for bootstrap an...
# aws
v
Hi, in my eks cluster roleMapping for bootstrap and other has been removed, how do i add them back?
Copy code
❯ kubectl get cm -n kube-system aws-auth -oyaml
apiVersion: v1
data:
  mapRoles: |
    - groups:
      - pulumi:codebuild-nuxt-group
      rolearn: arn:aws:iam::992821612213:role/staging-nuxt-codebuild-role-2b3e476
      username: staging-nuxt-usr
    - groups:
      - pulumi:codebuild-laravel-group
      rolearn: arn:aws:iam::992821612213:role/staging-laravel-codebuild-role-21ee51c
      username: staging-laravel-usr
kind: ConfigMap
metadata:
  annotations:
    <http://kubectl.kubernetes.io/last-applied-configuration|kubectl.kubernetes.io/last-applied-configuration>: |
      {"apiVersion":"v1","data":{"mapRoles":"- rolearn: 'arn:aws:iam::992821612213:role/staging-nuxt-codebuild-role-2b3e476'\n  user
name: staging-nuxt-usr\n  groups:\n    - 'pulumi:codebuild-nuxt-group'\n- rolearn: 'arn:aws:iam::992821612213:role/staging-laravel-c
odebuild-role-21ee51c'\n  username: staging-laravel-usr\n  groups:\n    - 'pulumi:codebuild-laravel-group'\n- rolearn: 'arn:aws:iam:
:992821612213:role/primary-eks-ng-role-427c54e'\n  username: 'system:node:{{EC2PrivateDNSName}}'\n  groups:\n    - 'system:bootstrap
pers'\n    - 'system:nodes'\n"},"kind":"ConfigMap","metadata":{"labels":{"<http://app.kubernetes.io/managed-by|app.kubernetes.io/managed-by>":"pulumi"},"name":"aws-auth",
"namespace":"kube-system"}}
  creationTimestamp: "2022-09-04T00:21:19Z"
  labels:
    <http://app.kubernetes.io/managed-by|app.kubernetes.io/managed-by>: pulumi
  name: aws-auth
  namespace: kube-system
  resourceVersion: "1774497"
  uid: 288cd4de-2769-4f81-ac67-cb413728677d
v
have they been removed manually? if so, id recommend a
pulumi up -r
v
No, it added few roles for codebuilds and thats it
v
hmm, doesnt sound like something pulumi would remove by itself, not seen that before
for some reason this not being applyed
Copy code
{
      mapRoles: '- groups:\n' +
        '  - pulumi:codebuild-nuxt-group\n' +
        '  rolearn: arn:aws:iam::992821612213:role/staging-nuxt-codebuild-role-2b3e476\n' +
        '  username: staging-nuxt-usr\n' +
        '- groups:\n' +
        '  - pulumi:codebuild-laravel-group\n' +
        '  rolearn: arn:aws:iam::992821612213:role/staging-laravel-codebuild-role-21ee51c\n' +
        '  username: staging-laravel-usr\n'
    }
@victorious-church-57397 do you think its a bug?
v
Hmm unsure, I'll have to check our cluster tomorrow to verify that
Not on laptop atm so can't look
v
had to manually add that up. definitely a bug
a
@victorious-dusk-75271 how did you solve this? It looks like my bootstrap roles have also disappeared 😮
v
@abundant-twilight-93753 i had to contact support to get this resolved.