I recently upgraded an eks cluster from 1.18 to 1.21 in EKS. I had been using a CSR with apiVersion: certificates.k8s.io/v1beta1. This is deprecated from 1.19+, but still functional in 1.21. But will be removed in 1.22. I had been using signer kubernetes.io/legacy-unknown, which after issuing kubectl certificate approve would give a certificate under kubectl get csr my-csr -n my-namespace -o jsonpath='{.status.certificate}
I went on to update the apiVersion for the CSR to certificates.k8s.io/v1 and use signer kubernetes.io/kube-apiserver-client as per this documentation. Although I am getting the CSR approved, there is no certificate. Can someone point me in the right direction regarding this issue? Thanks.
EKS CSR Signer kubernetes.io/kube-apiserver-client no certificate
296 Views Asked by MCR At
1
There are 1 best solutions below
Related Questions in KUBERNETES
- How to know a Pod's own IP address from inside a container in the Pod?
- Who will decide the "specified number of pods" for replication controller in kubernetes?
- Access other containers of a pod in Kubernetes
- Kubernetes cluster using Vagrant not working after restart
- kubectl not installed with gcloud SDK
- How do I access the Kubernetes api from within a pod container?
- Exposing several services with Vagrant and Kubernetes on my own server
- Does Kubernetes provision new VMs for pods on my cloud platform?
- Any suggestion for running Aerospike on Kubernetes on CoreOS on GCE?
- Kubernetes - kubectl exec bash - session drop and line width
- Google Container Engine (GKE): "Hello Wordpress" tutorial not working (ERR_CONNECTION_REFUSED)
- Kubernetes Pod Creation Speed
- How can i set max count of pods for replication-controller per node?
- Is there a way to tell kubernetes to update your containers?
- Postgres with Kubernetes and persistentDisk
Related Questions in AMAZON-EKS
- Terraform: How to add Windows worker nodes to eks cluster?
- SSL with GRPC on AWS EKS and Istio Ingress gives StatusCode.UNAVAILABLE
- Jenkins Helm backup fails with WebIdentityErr
- How to share an AWS NLB between two EKS Services?
- Airflow Unittest.cfg permission problems?
- How to enable automatic mTLS using istio mesh in AWS EKS?
- Cert-Manager dns01 challenge order pending
- Communication Between Pods in Different Cluster in K8s using yaml
- nginx docker connect() failed (110: Connection timed out) while connecting to upstream, same configuration works without docker, what could be wrong?
- AWS Elastic Kubernetes Service: how to expose a container/pod to an Elasticsearch cluster inside AWS?
- kubectl authentication to aws eks cluster
- Adding EKS managed windows node group failed. How to debug?
- Kubernetes AWS NLB Services Create Excessive Amount Of Security Group Rules
- Autoscaling Kubernetes based on number of Jobs on AWS EKS
- EKS LoadBalancer service not returning response outside from EKS
Related Questions in CERTIFICATE-SIGNING-REQUEST
- Creating Self-signed Certificate Chain with openssl
- Certificate pinning mobile apps
- How does browser ensure that public key of CA is actually from that CA?
- kubectl : unable to recognize "csr.yaml": no matches for kind "CertificateSigningRequest" in version "certificates.k8s.io/v1"
- Generate key and CSR in IBM Cloud
- Is there a way to decode CSR to String to get attributes?
- How to obtain Certificate Signing Request
- Has one Apple Distribution certificate but its private key is not installed. Contact the creator of this certificate to get a copy of the private key
- How to retrieve domains from CSR (Certificate Signing Request)?
- How do I use configure OpenSSL's policy to sign a certificate with multiple OUs?
- How to Create Certificate Signing Request on Windows 10 For Apple
- EKS CSR Signer kubernetes.io/kube-apiserver-client no certificate
- Failed to install app in physical device through XCode 13.2.1
- webhook: tls: failed to find "CERTIFICATE" PEM block in certificate input after skipping PEM blocks of the following types: [CERTIFICATE REQUEST]
- CreatePKCS10CSR soap message in c++
Trending Questions
- UIImageView Frame Doesn't Reflect Constraints
- Is it possible to use adb commands to click on a view by finding its ID?
- How to create a new web character symbol recognizable by html/javascript?
- Why isn't my CSS3 animation smooth in Google Chrome (but very smooth on other browsers)?
- Heap Gives Page Fault
- Connect ffmpeg to Visual Studio 2008
- Both Object- and ValueAnimator jumps when Duration is set above API LvL 24
- How to avoid default initialization of objects in std::vector?
- second argument of the command line arguments in a format other than char** argv or char* argv[]
- How to improve efficiency of algorithm which generates next lexicographic permutation?
- Navigating to the another actvity app getting crash in android
- How to read the particular message format in android and store in sqlite database?
- Resetting inventory status after order is cancelled
- Efficiently compute powers of X in SSE/AVX
- Insert into an external database using ajax and php : POST 500 (Internal Server Error)
Popular Questions
- How do I undo the most recent local commits in Git?
- How can I remove a specific item from an array in JavaScript?
- How do I delete a Git branch locally and remotely?
- Find all files containing a specific text (string) on Linux?
- How do I revert a Git repository to a previous commit?
- How do I create an HTML button that acts like a link?
- How do I check out a remote Git branch?
- How do I force "git pull" to overwrite local files?
- How do I list all files of a directory?
- How to check whether a string contains a substring in JavaScript?
- How do I redirect to another webpage?
- How can I iterate over rows in a Pandas DataFrame?
- How do I convert a String to an int in Java?
- Does Python have a string 'contains' substring method?
- How do I check if a string contains a specific word?
EKS does not have a kubernetes.io/kube-apiserver-client signer. Instead they manage users via AWS IAM. This is a custom and EKS specific way to handle users.
See: https://docs.aws.amazon.com/eks/latest/userguide/add-user-role.html