Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Is there a way to use this in eks without using a service account? #355

Open
michaelmohamed opened this issue Jan 23, 2025 · 1 comment
Open
Labels
question Further information is requested

Comments

@michaelmohamed
Copy link

Is there a way to use this in EKS without using a service account?

I'd like to use the standard access token and secret with EKS.

When I install via

helm upgrade --install aws-mountpoint-s3-csi-driver \
    --namespace kube-system \
    aws-mountpoint-s3-csi-driver/aws-mountpoint-s3-csi-driver 

Pod creation fails.

17m         Normal    SuccessfulCreate   daemonset/s3-csi-node   Created pod: s3-csi-node-txcv6
17m         Normal    SuccessfulCreate   daemonset/s3-csi-node   Created pod: s3-csi-node-2lcm7
17m         Normal    SuccessfulCreate   daemonset/s3-csi-node   Created pod: s3-csi-node-kfvb7
7m39s       Warning   FailedCreate       daemonset/s3-csi-node   Error creating: pods "s3-csi-node-" is forbidden: error looking up service account kube-system/s3-csi-driver-sa: serviceaccount "s3-csi-driver-sa" not found
4m44s       Warning   FailedCreate       daemonset/s3-csi-node   Error creating: pods "s3-csi-node-" is forbidden: error looking up service account kube-system/s3-csi-driver-sa: serviceaccount "s3-csi-driver-sa" not found
@unexge
Copy link
Contributor

unexge commented Jan 24, 2025

Hey @michaelmohamed, our Helm chart should create and use service account s3-csi-driver-sa by default unless you pass node.serviceAccount.create=false.

If you really don't want to create/use a specific service account you might try setting node.serviceAccount.create=false and node.serviceAccount.name=default to not create a new service account and use the default service account for the namespace. But, that's something we don't test against and some things might not work.

@unexge unexge added the question Further information is requested label Jan 24, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
question Further information is requested
Projects
None yet
Development

No branches or pull requests

2 participants