josephglanville edited a comment on issue #11303:
URL: https://github.com/apache/druid/issues/11303#issuecomment-915666388
@AdheipSingh
kube versions:
```
Client Version: version.Info{Major:"1", Minor:"21", GitVersion:"v1.21.0",
GitCommit:"cb303e613a121a29364f75cc67d3d580833a7479", GitTreeState:"clean",
BuildDate:"2021-04-08T16:31:21Z", GoVersion:"go1.16.1", Compiler:"gc",
Platform:"darwin/amd64"}
Server Version: version.Info{Major:"1", Minor:"21+",
GitVersion:"v1.21.2-eks-0389ca3",
GitCommit:"8a4e27b9d88142bbdd21b997b532eb6d493df6d2", GitTreeState:"clean",
BuildDate:"2021-07-31T01:34:46Z", GoVersion:"go1.16.5", Compiler:"gc",
Platform:"linux/amd64"}
```
SA account annotations:
```
Name: druid
Namespace: data
Labels:
tanka.dev/environment=6bac8592800828ba90b13a675b892ed3add99e3cf09bd1f9
Annotations: eks.amazonaws.com/role-arn:
arn:aws:iam::<account_id_scrubbed>:role/prod-us-west-2-druid
Image pull secrets: <none>
Mountable secrets: druid-token-2k8d7
Tokens: druid-token-2k8d7
Events: <none>
```
SA properly injecting token into pod:
```
AWS_DEFAULT_REGION: us-west-2
AWS_REGION: us-west-2
AWS_ROLE_ARN:
arn:aws:iam::<account_id_scrubbed>:role/prod-us-west-2-druid
AWS_WEB_IDENTITY_TOKEN_FILE:
/var/run/secrets/eks.amazonaws.com/serviceaccount/token
```
Worth mentioning we are using IRSA successfully for other services/software
so everything else is working AFAICT.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
