https://pulumi.com logo
Powered by
Title
v

victorious-dusk-75271

09/04/2022, 6:13 PM
Hi, in my eks cluster roleMapping for bootstrap and other has been removed, how do i add them back?
❯ kubectl get cm -n kube-system aws-auth -oyaml
apiVersion: v1
data:
  mapRoles: |
    - groups:
      - pulumi:codebuild-nuxt-group
      rolearn: arn:aws:iam::992821612213:role/staging-nuxt-codebuild-role-2b3e476
      username: staging-nuxt-usr
    - groups:
      - pulumi:codebuild-laravel-group
      rolearn: arn:aws:iam::992821612213:role/staging-laravel-codebuild-role-21ee51c
      username: staging-laravel-usr
kind: ConfigMap
metadata:
  annotations:
    <http://kubectl.kubernetes.io/last-applied-configuration|kubectl.kubernetes.io/last-applied-configuration>: |
      {"apiVersion":"v1","data":{"mapRoles":"- rolearn: 'arn:aws:iam::992821612213:role/staging-nuxt-codebuild-role-2b3e476'\n  user
name: staging-nuxt-usr\n  groups:\n    - 'pulumi:codebuild-nuxt-group'\n- rolearn: 'arn:aws:iam::992821612213:role/staging-laravel-c
odebuild-role-21ee51c'\n  username: staging-laravel-usr\n  groups:\n    - 'pulumi:codebuild-laravel-group'\n- rolearn: 'arn:aws:iam:
:992821612213:role/primary-eks-ng-role-427c54e'\n  username: 'system:node:{{EC2PrivateDNSName}}'\n  groups:\n    - 'system:bootstrap
pers'\n    - 'system:nodes'\n"},"kind":"ConfigMap","metadata":{"labels":{"<http://app.kubernetes.io/managed-by|app.kubernetes.io/managed-by>":"pulumi"},"name":"aws-auth",
"namespace":"kube-system"}}
  creationTimestamp: "2022-09-04T00:21:19Z"
  labels:
    <http://app.kubernetes.io/managed-by|app.kubernetes.io/managed-by>: pulumi
  name: aws-auth
  namespace: kube-system
  resourceVersion: "1774497"
  uid: 288cd4de-2769-4f81-ac67-cb413728677d
v

victorious-church-57397

09/04/2022, 6:16 PM
have they been removed manually? if so, id recommend a 
pulumi up -r
v

victorious-dusk-75271

09/04/2022, 6:17 PM
No, it added few roles for codebuilds and thats it
v

victorious-church-57397

09/04/2022, 6:18 PM
hmm, doesnt sound like something pulumi would remove by itself, not seen that before
v

victorious-dusk-75271

09/04/2022, 6:41 PM
https://github.com/pulumi/pulumi-eks/blob/0ad8293d96cb225367f0248e376ba95db61b98c6/nodejs/eks/cluster.ts#L629
for some reason this not being applyed
{
      mapRoles: '- groups:\n' +
        '  - pulumi:codebuild-nuxt-group\n' +
        '  rolearn: arn:aws:iam::992821612213:role/staging-nuxt-codebuild-role-2b3e476\n' +
        '  username: staging-nuxt-usr\n' +
        '- groups:\n' +
        '  - pulumi:codebuild-laravel-group\n' +
        '  rolearn: arn:aws:iam::992821612213:role/staging-laravel-codebuild-role-21ee51c\n' +
        '  username: staging-laravel-usr\n'
    }
@victorious-church-57397 do you think its a bug?
v

victorious-church-57397

09/04/2022, 6:57 PM
Hmm unsure, I'll have to check our cluster tomorrow to verify that
Not on laptop atm so can't look
v

victorious-dusk-75271

09/04/2022, 7:09 PM
had to manually add that up. definitely a bug
a

abundant-twilight-93753

09/28/2022, 12:37 AM
@victorious-dusk-75271 how did you solve this? It looks like my bootstrap roles have also disappeared 😮
v

victorious-dusk-75271

09/28/2022, 8:16 AM
@abundant-twilight-93753 i had to contact support to get this resolved.
#awsJoin Slack
Powered by