Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Ec2 Metadata updgrade from imdSV1 to imdSV2 causes 403 and 401 error- kube2iam #345

Open
ContraBoy9999 opened this issue Aug 17, 2022 · 1 comment

Comments

@ContraBoy9999
Copy link

ContraBoy9999 commented Aug 17, 2022

Hi All,
I recently updated my ec2 instances to use imdSV2 but had to rollback because of the following issue:

It looks like after i did the upgrade my init containers started failing and i saw the following in the logs:

time="2022-01-11T14:25:01Z" level=info msg="PUT /latest/api/token (403) took 0.753220 ms" req.method=PUT req.path=/latest/api/token req.remote=XXXXX res.duration=0.75322 res.status=403 time="2022-01-11T14:25:37Z" level=error msg="Error getting instance id, got status: 401 Unauthorized"

We are using Kube2iam for the same. Any advice what changes need to be done on the Kube2iam side to support imdSV2? Below is some info from my kube2iam daemonset:
EKS =1.21
image = "jtblin/kube2iam:0.10.9"

@volkert-fastned
Copy link

This seems to be a duplicate of #339

And there also appears to already be an outstanding Pull Request, that has been open for almost a year now: #344

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants