This message was deleted Pulumi Community #general

Join Slack

This message was deleted.

# general

sparse-intern-71089

05/31/2019, 2:51 AM

This message was deleted.

full-dress-10026

05/31/2019, 3:03 AM

It appears that

.instanceRole

is undefined.

full-dress-10026

05/31/2019, 3:05 AM

If I try setting

instanceRoles

on my

eks.Cluster

, I receive:

Copy code

error: Running program '/home/kenny/compute_software/infrastructure/pulumi-k8s-src' failed with an unhandled exception:
    Error: an instanceProfile is required
        at Object.createNodeGroup (/home/kenny/compute_software/infrastructure/pulumi-k8s-src/node_modules/@pulumi/nodegroup.ts:238:15)
        at new Cluster (/home/kenny/compute_software/infrastructure/pulumi-k8s-src/node_modules/@pulumi/cluster.ts:597:37)
        at Object.<anonymous> (/home/kenny/compute_software/infrastructure/pulumi-k8s-src/src/index.ts:123:18)
        at Module._compile (module.js:653:30)
        at Module.m._compile (/home/kenny/compute_software/infrastructure/pulumi-k8s-src/node_modules/ts-node/src/index.ts:439:23)
        at Module._extensions..js (module.js:664:10)
        at Object.require.extensions.(anonymous function) [as .ts] (/home/kenny/compute_software/infrastructure/pulumi-k8s-src/node_modules/ts-node/src/index.ts:442:12)
        at Module.load (module.js:566:32)
        at tryModuleLoad (module.js:506:12)
        at Function.Module._load (module.js:498:3)

full-dress-10026

05/31/2019, 3:45 AM

Super confused. Setting

instanceRole

on the

eks.Cluster

works but breaks lots of other things (i.e. coredns cannot be pulled from ECR). Looking at the code for

Cluster

, I see there is a

eksRole

and a

instanceRole

. Not sure what the difference is.

full-dress-10026

05/31/2019, 3:46 AM

How are you supposed to give your k8s Pods access via IAM to AWS services?

shy-receptionist-99213

05/31/2019, 6:02 AM

Usually the best way is not to use instance role for your pods but to utilize something like https://github.com/uswitch/kiam

full-dress-10026

05/31/2019, 3:01 PM

That's interesting but I'd like to get up and rolling without needing to integrate another whole service. There must be a way to do this without adding a new service.

damp-book-35965

05/31/2019, 3:46 PM

This might help you https://github.com/pulumi/pulumi-eks/blob/master/nodejs/eks/examples/nodegroup/index.ts

full-dress-10026

05/31/2019, 3:54 PM

Yeah I've seen that. Going to try the

createNodeGroup

. I'm surprised how fragile this is.

full-dress-10026

05/31/2019, 4:10 PM

Any idea if you can have

deployDashboard: true,

when using

createNodeGroup

full-dress-10026

05/31/2019, 4:15 PM

I'm guessing deploying the dashboard is going to be problematic if you use

createNodeGroup

because there are no nodes in the cluster. Unfortunately the dashboard code is not exposed as an API in the eks package either 😞

damp-book-35965

05/31/2019, 4:15 PM

Isnt deployDashboard part of the cluster definition and not node group ?

full-dress-10026

05/31/2019, 4:16 PM

Yes but from what I can tell, it will try to deploy the dashboard immediately.

damp-book-35965

05/31/2019, 4:16 PM

Oh..havent tried that since we dont deploy the dashboard at all..It will be a good issue to file

full-dress-10026

05/31/2019, 4:16 PM

It's done here: https://github.com/pulumi/pulumi-eks/blob/087f65501092b79e5b5fac7f138de4d0e215830f/nodejs/eks/cluster.ts#L634-L636. Given that no nodes are in the group, that will probably fail.

full-dress-10026

05/31/2019, 4:17 PM

It'd be great if the dashboard was exposed as an API.

damp-book-35965

05/31/2019, 4:17 PM

You can also try to spin up cluster with

deployDashboard: false

and then change to

true

in a second

pulumi up

full-dress-10026

05/31/2019, 4:18 PM

True. A bit annoying for spinning up new environments though.

full-dress-10026

05/31/2019, 4:18 PM

Is there a Typescript hack to be able to get access to that createDashboard function?

damp-book-35965

05/31/2019, 4:19 PM

True..you can also circumvent the whole thing by deploying dashboard through a helm chart as well..

damp-book-35965

05/31/2019, 4:19 PM

Not a typescript expert 😞

full-dress-10026

05/31/2019, 4:20 PM

Hmm, worth a shot. Guessing there's no examples for that?

damp-book-35965

05/31/2019, 4:22 PM

Havent come across it

shy-receptionist-99213

05/31/2019, 5:50 PM

some helm chart examples are here https://blog.pulumi.com/using-helm-and-pulumi-to-define-cloud-native-infrastructure-as-code

full-dress-10026

05/31/2019, 7:25 PM

I'm trying

Copy code

new k8s.helm.v2.Chart("k8s-dashboard", {
    repo: "stable",
    chart: "kubernetes-dashboard",
    version: "1.10.1"
}, {providers: {kubernetes: k8sProvider}});

but I get

Copy code

Error: Command failed: helm fetch stable/kubernetes-dashboard --untar --version 1.10.1 --destination /tmp/tmp-13188EbwU1rymTPCU
    Error: chart "kubernetes-dashboard" matching 1.10.1 not found in stable index. (try 'helm repo update'). No chart version found for kubernetes-dashboard-1.10.1

According to https://hub.helm.sh/charts/stable/kubernetes-dashboard the latest version is either 1.10.1 or 1.5.2. I tried both and they both result in the above error.

full-dress-10026

05/31/2019, 7:26 PM

Running

helm fetch stable/kubernetes-dashboard --version 1.5.2

locally, it works.

full-dress-10026

05/31/2019, 7:27 PM

Woah, ran it after running that fetch command locally and it worked!

6 Views

Open in Slack

Previous Next