We're updating our k8s cluster to use OIDC-enabled...
# announcements
a
We're updating our k8s cluster to use OIDC-enabled service accounts as much as possible, but we noticed the`flyte-copilotdownloader` init container seems to only be able to get IAM creds from the EC2 metadata service at the moment: https://github.com/flyteorg/flytecopilot/blob/master/cmd/root.go#L87. Is that right?
Follow-up: is it possible to disable copilot? All of our tasks are Python tasks with
flytekit
installed.
k
@Alex Bain this is weird
seems right to me
but, i am not sure how it works for us, using OIDC
a
@Ketan (kumare3) let me get a review for https://github.com/flyteorg/flytecopilot/pull/37, it needs a maintainer
k
ohh yes
done
@Alex Bain lint failed
sorry should have run the workflows earlier
a
I pushed another commit to fix
make lint
and it passed, but I can't merge the PR yet. Could you take a look? @Ketan (kumare3) https://github.com/flyteorg/flytecopilot/pull/37
👍 1
k
Let me get to my desk, I can merge and quick fix and let me give you contribute access, welcome to the crew
113 Views