-
https://github.com/kuberstack/installer/blob/master/kops/callKops.go#L115 => Should not be ```AlwaysAllow``` but instead ```Node,RBAC```
https://github.com/kuberstack/installer/blob/master/kops/ca…
-
The health check of the kiam-server is failing with the following
```
/etc/kiam/tls # /health --key server-key.pem --ca ca.pem --cert server.pem --server-address=localhost:443
WARN[0000] error che…
-
While running in AWS, you can use the instance profile to get an auth token, but currently Thanos doesn't configure the bucket if no credentials are provided.
minio supports IAM :
```
iam := cr…
dadux updated
6 years ago
-
When deploying kiam using the yaml files in /deploy, both DaemonSets are created, but only the kiam-agent DaemonSet actually has any pods. kiam-server has no pods at all, there are no failures and no …
-
Would it be possible to switch to kiam without actually bringing the cluster down? I am confused on the part where the DS's are created from the example [manifests](https://github.com/uswitch/kiam/tre…
-
Hi!
We want to migrate from Kube2IAM to Kiam, but had to stop it because Kiam lacks the autodiscover base ARN feature: [the autodiscover of base ARN](https://github.com/jtblin/kube2iam#base-arn-au…
-
Deployed to a 1.8 kops cluster. Generated Server and Client TLS certs using CFSSL with localhost and kiam-server as server hosts, and put these in as a secret with the ca.pem
Agent starts fine and…
-
Current code in question: https://github.com/uswitch/kiam/blob/77d85897e66a0c3ab2d8cbab373a607b371f9865/pkg/aws/sts/resolver_detect_arn.go#L54-L60
It is quite possible for the ARN to have more than…
-
Greetings,
We noticed that the logs being ingested by the following source config, which I have added in a new file `fluentd-kubernetes-sumologic/conf.d/file/source.trace.conf` as seen here in our…
-
So I've set KIAM up and can see the server process logging my attempts at fetching credentials but the end container.
I have the following jenkinsci/kubernetes-plugin pipeline (it's not really impo…