Abhinay Dronavally
05/16/2023, 4:33 AMSamhita Alla
Abhinay Dronavally
05/16/2023, 9:42 AMSamhita Alla
David Espejo (he/him)
05/16/2023, 3:49 PMAbhinay Dronavally
05/16/2023, 4:06 PMSamhita Alla
Abhinay Dronavally
05/17/2023, 10:17 AM{"json":{},"level":"warning","msg":"stow configuration section missing, defaulting to legacy s3/minio connection config","ts":"2023-05-17T10:14:52Z"}
{"json":{},"level":"warning","msg":"stow configuration section missing, defaulting to legacy s3/minio connection config","ts":"2023-05-17T10:14:55Z"}
{"json":{},"level":"warning","msg":"Failed to create cluster resources for namespace [flytesnacks-development] with err: Failed to read config template dir [flytesnacks-development] for namespace [] with err: open : no such file or directory","ts":"2023-05-17T10:14:55Z"}
{"json":{},"level":"warning","msg":"Failed to create cluster resources for namespace [flytesnacks-staging] with err: Failed to read config template dir [flytesnacks-staging] for namespace [] with err: open : no such file or directory","ts":"2023-05-17T10:14:55Z"}
{"json":{},"level":"warning","msg":"Failed to create cluster resources for namespace [flytesnacks-production] with err: Failed to read config template dir [flytesnacks-production] for namespace [] with err: open : no such file or directory","ts":"2023-05-17T10:14:55Z"}
{"json":{},"level":"warning","msg":"Failed cluster resource creation loop with: Failed to read config template dir [flytesnacks-development] for namespace [] with err: open : no such file or directory, Failed to read config template dir [flytesnacks-staging] for namespace [] with err: open : no such file or directory, Failed to read config template dir [flytesnacks-production] for namespace [] with err: open : no such file or directory","ts":"2023-05-17T10:14:55Z"}
{"json":{},"level":"error","msg":"Failed to initialize certificates for Secrets Webhook. client rate limiter Wait returned an error: context canceled","ts":"2023-05-17T10:14:57Z"}
{"json":{},"level":"panic","msg":"Failed to start Propeller, err: failed to create FlyteWorkflow CRD: <http://customresourcedefinitions.apiextensions.k8s.io|customresourcedefinitions.apiextensions.k8s.io> is forbidden: User \"system:serviceaccount:<workspace_name>:flyte\" cannot create resource \"customresourcedefinitions\" in API group \"<http://apiextensions.k8s.io|apiextensions.k8s.io>\" at the cluster scope","ts":"2023-05-17T10:14:57Z"}
Samhita Alla
Abhinay Dronavally
05/17/2023, 11:36 AMSamhita Alla
Abhinay Dronavally
05/17/2023, 11:44 AMannotations:
<http://eks.amazonaws.com/role-arn|eks.amazonaws.com/role-arn>: "arn:aws:iam::<aws-account-id>:role/flyte-system-role"
Samhita Alla
We tried this, this worked. But we want to simplify this even further with env variables injection.@David Espejo (he/him), do you know how to do this?
Abhinay Dronavally
05/17/2023, 11:59 AMDavid Espejo (he/him)
05/17/2023, 6:33 PMIs there a way to configure flyte without giving role ARN, by giving access to EKS host and port?@Abhinay Dronavally IAM Roles for Service Accounts is the recommended approach, and as far as I can tell the chart itself is designed to accept a Service Account annotated with an IAM role. What's your use case here?
Abhinay Dronavally
05/17/2023, 6:35 PMDavid Espejo (he/him)
05/17/2023, 6:37 PMAbhinay Dronavally
05/17/2023, 6:37 PMDavid Espejo (he/him)
05/17/2023, 6:38 PMAbhinay Dronavally
05/17/2023, 6:38 PMDavid Espejo (he/him)
05/17/2023, 6:39 PMAbhinay Dronavally
05/17/2023, 6:41 PMDavid Espejo (he/him)
05/17/2023, 6:43 PMCan you share a holy bible of flight which I can follow for config management?Sure but, in this context, what do you mean by
configuration management
?Abhinay Dronavally
05/17/2023, 6:44 PMDavid Espejo (he/him)
05/17/2023, 6:45 PMAlso, is there a way to inject env variables for AWS S3 and Postgres like the way we do for Kubernetes config?All the env vars that I see accepted by the chart are in
values
or under extraEnvVars
(again in values
)
There is a way to inject env vars but at the task level (using Pod Templates), not that I know for the backendAbhinay Dronavally
05/17/2023, 6:48 PMDavid Espejo (he/him)
05/17/2023, 6:57 PMAbhinay Dronavally
05/18/2023, 4:20 AM