sparse-intern-71089
01/05/2023, 8:09 PMsquare-laptop-45713
01/05/2023, 8:18 PMrecreate
operation (I put placeholders for the AWS Account #s):
eks:index:Cluster$kubernetes:core/v1:ConfigMap (kettleos-eks-dev-nodeAccess)
++ kubernetes:core/v1:ConfigMap (create-replacement)
[id=kube-system/aws-auth]
[urn=urn:pulumi:dev::base::eks:index:Cluster$kubernetes:core/v1:ConfigMap::kettleos-eks-dev-nodeAccess]
__inputs : {
data : {
mapRoles: "- rolearn: 'arn:aws:iam::[AWSDevAccount]:role/kettleos-eks-dev-ng-role-4a11bab'
username: 'system:node:{{EC2PrivateDNSName}}'
groups:
- 'system:bootstrappers'
- 'system:nodes'
" => "- rolearn: arn:aws:iam::[AWSDevAccount]:role/kettleos-eks-dev-ng-role-4a11bab
username: system:node:{{EC2PrivateDNSName}}
groups:
- system:bootstrappers
- system:nodes
"
}
}
data : {
mapRoles: "- rolearn: 'arn:aws:iam::[AWSDevAccount]:role/kettleos-eks-dev-ng-role-4a11bab'
username: 'system:node:{{EC2PrivateDNSName}}'
groups:
- 'system:bootstrappers'
- 'system:nodes'
- rolearn: 'arn:aws:iam::[AWSDevAccount]:role/OrganizationAccountAccessRole'
username: 'developer'
groups:
- 'system:masters'
- rolearn: 'arn:aws:iam::[AWSDevAccount]:role/OrganizationAccountReadOnlyRole'
username: 'developer'
groups:
- 'system:masters'
" => "- rolearn: arn:aws:iam::[AWSDevAccount]:role/kettleos-eks-dev-ng-role-4a11bab
username: system:node:{{EC2PrivateDNSName}}
groups:
- system:bootstrappers
- system:nodes
"
}
metadata : {
annotations : {
<http://kubectl.kubernetes.io/last-applied-configuration|kubectl.kubernetes.io/last-applied-configuration>: "{"apiVersion":"v1","data":{"mapRoles":"- rolearn: 'arn:aws:iam::[AWSDevAccount]:role/kettleos-eks-dev-ng-role-4a11bab'\n username: 'system:node:{{EC2PrivateDNSName}}'\n groups:\n - 'system:bootstrappers'\n - 'system:nodes'\n"},"kind":"ConfigMap","metadata":{"labels":{"<http://app.kubernetes.io/managed-by|app.kubernetes.io/managed-by>":"pulumi"},"name":"aws-auth","namespace":"kube-system"}}
" => "{"apiVersion":"v1","data":{"mapRoles":"- rolearn: arn:aws:iam::[AWSDevAccount]:role/kettleos-eks-dev-ng-role-4a11bab\n username: system:node:{{EC2PrivateDNSName}}\n groups:\n - system:bootstrappers\n - system:nodes\n"},"kind":"ConfigMap","metadata":{"labels":{"<http://app.kubernetes.io/managed-by|app.kubernetes.io/managed-by>":"pulumi"},"name":"aws-auth","namespace":"kube-system"}}
"
}
creationTimestamp: "2021-04-18T04:32:06Z" => "2022-12-28T06:51:37Z"
managedFields : [
[0]: {
fieldsV1 : {
f:data : {
. : {}
f:mapRoles: {}
}
}
manager : "pulumi-resource-kubernetes" => "pulumi-kubernetes"
time : "2021-04-18T04:32:06Z" => "2022-12-28T06:51:37Z"
}
[1]: {
apiVersion: "v1"
fieldsType: "FieldsV1"
fieldsV1 : {
f:data: {
f:mapRoles: {}
}
}
manager : "kubectl-edit"
operation : "Update"
time : "2021-04-18T05:11:50Z"
}
]
resourceVersion : "190307907" => "210893469"
uid : "5ea6eea4-d11e-4a72-969d-19ab38f9b590" => "16f0f6ce-e58b-44c9-8a3b-c58910640b21"
}
Diagnostics:
many-telephone-49025
01/05/2023, 8:37 PMsystem:masters
in the old cm?square-laptop-45713
01/05/2023, 8:39 PMmany-telephone-49025
01/05/2023, 8:43 PMsquare-laptop-45713
01/05/2023, 8:44 PMsquare-laptop-45713
01/05/2023, 8:45 PMsystem:masters
entries are what we have to add manually after the cluster is created in order for people to access the k8s cluster either in the Web Console or via CLI without using the creator rolesquare-laptop-45713
01/05/2023, 8:46 PMaws-auth
ConfigMap is the only way to accomplish this so a recreate
really blows it apartmany-telephone-49025
01/05/2023, 8:47 PMsquare-laptop-45713
01/05/2023, 8:48 PMeksctl
tool afaiksquare-laptop-45713
01/05/2023, 8:49 PMmany-telephone-49025
01/05/2023, 8:49 PMmany-telephone-49025
01/05/2023, 8:49 PMsquare-laptop-45713
01/05/2023, 8:49 PMsquare-laptop-45713
01/05/2023, 8:50 PMmany-telephone-49025
01/05/2023, 8:50 PMmany-telephone-49025
01/05/2023, 8:50 PMsquare-laptop-45713
01/05/2023, 8:51 PMmany-telephone-49025
01/05/2023, 8:52 PMsquare-laptop-45713
01/05/2023, 8:52 PMmany-telephone-49025
01/05/2023, 8:54 PMsquare-laptop-45713
01/05/2023, 8:54 PMmany-telephone-49025
01/05/2023, 8:54 PMsquare-laptop-45713
01/05/2023, 8:55 PMsquare-laptop-45713
01/05/2023, 8:55 PMsquare-laptop-45713
01/05/2023, 8:56 PMsquare-laptop-45713
01/05/2023, 8:56 PMsquare-laptop-45713
01/05/2023, 8:58 PMpulumi/kubernetes
package changed from ^3.22.1
to ^3.23.1
but more importantly I think was the changes to pulumi/awsx
package. Here are all the dep changes:
- "@pulumi/aws": "^5.20.0",
- "@pulumi/awsx": "^0.40.1",
- "@pulumi/docker": "^3.6.0",
- "@pulumi/kubernetes": "^3.22.1",
- "@pulumi/pulumi": "^3.46.1",
+ "@pulumi/aws": "^5.25.0",
+ "@pulumi/awsx": "^1.0.1",
+ "@pulumi/docker": "^3.6.1",
+ "@pulumi/kubernetes": "^3.23.1",
+ "@pulumi/pulumi": "^3.50.2",
many-telephone-49025
01/05/2023, 8:59 PMmany-telephone-49025
01/05/2023, 8:59 PMmany-telephone-49025
01/05/2023, 9:00 PMmany-telephone-49025
01/05/2023, 9:10 PMmany-telephone-49025
01/05/2023, 9:11 PMsquare-laptop-45713
01/05/2023, 9:14 PMmany-telephone-49025
01/05/2023, 9:14 PMmany-telephone-49025
01/05/2023, 9:15 PMsquare-laptop-45713
01/05/2023, 9:16 PMmany-telephone-49025
01/05/2023, 9:17 PMsquare-laptop-45713
01/05/2023, 9:20 PMmany-telephone-49025
01/05/2023, 9:34 PMmany-telephone-49025
01/05/2023, 9:35 PMsquare-laptop-45713
01/05/2023, 9:39 PMmany-telephone-49025
01/06/2023, 8:42 AM