Super Bo
06/18/2023, 3:49 PMFailed to get data from \<ns3://meta-bucket/flytesnacks/development/HF4IUC4ZOJ77UBKLLP77H4SY24======/fastf>\na252ae25deeecc9b853db87173e84cb.tar.gz
to /root/ (recursive=False).\n\nOriginal exception: Access Denied\n"
David Espejo (he/him)
06/18/2023, 4:01 PMSuper Bo
06/18/2023, 4:20 PMflyte
namespace.
"Condition": {
"StringEquals": {
"<http://oidc.eks.us-east-1.amazonaws.com/id/<UUID-OIDC>:sub|oidc.eks.us-east-1.amazonaws.com/id/<UUID-OIDC>:sub>": "system:serviceaccount:flyte:flyte-backend-flyte-binary"
}
}
David Espejo (he/him)
06/18/2023, 5:21 PMpyflyte register ... --service-account
flytectl update workflow-execution-config -p <your-project> --attrFile security_context.yaml
cat security_context.yaml >>
project: <your-project>
domain: ""
max_parallelism: 25
security_context:
run_as:
k8s_service_account: <your-SA>
Super Bo
06/18/2023, 5:27 PMconfiguration.inline
like in this file https://github.com/flyteorg/flyte/blob/master/charts/flyte-binary/eks-production.yaml. But I think that doesn’t help much.
Thank you!Request failed with status code 500 failed to create workflow in propeller <http://FlyteWorkflow.flyte.lyft.com|FlyteWorkflow.flyte.lyft.com> "atsv5q7rp97m5fdg5kqs" is invalid: [metadata.annotations: Invalid value: "": name part must be non-empty, metadata.annotations: Invalid value: "": name part must consist of alphanumeric characters, '-', '_' or '.', and must start and end with an alphanumeric character (e.g. 'MyName', or 'my.name', or '123-abc', regex used for validation is '([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9]')]
kubectl annotate serviceaccount -n flytesnacks-development default <http://eks.amazonaws.com/role-arn=arn:aws:iam::<account_id>:role/<role_name|eks.amazonaws.com/role-arn=arn:aws:iam::<account_id>:role/<role_name>>
David Espejo (he/him)
06/20/2023, 11:49 AM