<@U06RKAMK0UC> Running `aws eks describe-cluster -...
# ask-ai
c
@ancient-wolf-19325 Running
aws eks describe-cluster --region <region> --name <Name-EKS-Cluster> --query "cluster.identity.oidc.issuer" --output text
gives me a sensible output. But when I try to run a script remotely, it still gives me this
Copy code
failed to create a signed url. Error: WebIdentityErr: failed to retrieve credentials\ncaused by: InvalidIdentityToken: No OpenIDConnect provider found in your account 
for <https://oidc.eks.us-west-2.amazonaws.com/id/><number>
j
The error you're encountering suggests an issue with the OpenID Connect (OIDC) provider configuration for your EKS cluster. Ensure that the OIDC provider is correctly associated with your EKS cluster and that the IAM roles have the necessary trust relationships configured. According to source 4, you can verify the OIDC provider using the command
aws eks describe-cluster --region <region> --name <Name-EKS-Cluster> --query "cluster.identity.oidc.issuer" --output text
. Additionally, ensure that the IAM role used by your Flyte deployment has a trust relationship with the OIDC provider. Would you like more detail on how to configure the IAM roles and trust relationships? Sources: - source 4 👍 0 button 👎 0 button 💡 Hint: Mention @runllm in the thread for followups.
a
@crooked-vase-16428 does the above work for you?
c
@average-finland-92144 Not yet! Having our DevOps guy run
eksctl utils associate-iam-oidc-provider
did at least change the error message though!
Right now I'm figuring a workflow (cuz the AWS Roles I can assume while working interactively don't have the right permissions to do everything, buuut I think the Role assumed by our CI/CD Pipelines could do it, so I'm gonna try through one of those in a sec)
We're in healthcare so we're not super agile wrt Roles & Permissions and stuff (cuz we need to maintain certifications like HITRUST)
a
Oh got it thanks for sharing. If you ever need a higher layer on top of Flyte and not having to deal with infra, there's always Union.ai 😉 Anyways, let us know how it goes and if you need help
c
Probably won't work (cuz again, Healthcare) - but thanks!