kubernetes / kops

Kubernetes Operations (kOps) - Production Grade k8s Installation, Upgrades and Management
https://kops.sigs.k8s.io/
Apache License 2.0
15.66k stars 4.61k forks source link

Can't modify aws-node daemonset to pull different images #16591

Open mattnewell opened 1 month ago

mattnewell commented 1 month ago

/kind bug

1. What kops version are you running? The command kops version, will display this information.

1.28.4

2. What Kubernetes version are you running? kubectl version will print the version if a cluster is running or provide the Kubernetes version specified as a kops flag.

1.28.8

3. What cloud provider are you using?

AWS

4. What commands did you run? What is the simplest way to reproduce this issue?

Create an AWS cluster exactly as specified in Getting Started

5. What happened after the commands executed?

kops deploys a daemonset called aws-node in the kube-system namespace. this ds has one initContainer and one container, both of which pull their image from 602401143452.dkr.ecr.us-west-2.amazonaws.com.

6. What did you expect to happen?

Our organization has a Service Control Policy that denies all access to us-west-2, therefore, we can't pull the image for these containers. Historically, It sounds like these images were only available in us-west-2, however, this is no longer the case and they are available from 602401143452.dkr.ecr.us-east-1.amazonaws.com. I'd like to override this repository. I've been up and down the docs and it's just not clear to me whether this is possible, and if so, how.

I'd appreciate any tips or advice. Thanks in advance!

kundan2707 commented 4 weeks ago

@mattnewell update all yaml file which has image 602401143452.dkr.ecr.us-east-1.amazonaws.com. which your desired one and rebuild kops

kundan2707 commented 4 weeks ago

/remove-kind bug

kundan2707 commented 4 weeks ago

/kind support