amazon-archives / k8s-cloudwatch-adapter

An implementation of Kubernetes Custom Metrics API for Amazon CloudWatch
Apache License 2.0
158 stars 98 forks source link

Fix AWS IAM Roles for Service Accounts permission problem #46

Closed Shivam9268 closed 4 years ago

Shivam9268 commented 4 years ago

AWS IRSA permission problem fix

Issue #, if available: #46

The pod running adapter is unable to read the token file available in the service account. It gives the error unable to read file at /var/run/secrets/eks.amazonaws.com/serviceaccount/token: permission denied

Description of changes: Setting security context for the pod solves the issue:

securityContext:
    fsGroup: 65534

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.