EKS csi secret store driver not finding SecretProviderClass

0

I'm trying to use parameter store and secret manager in my EKS cluster but i keep getting this error:

MountVolume.SetUp failed for volume "secrets-store-inline" : rpc error: code = Unknown desc = failed to get secretproviderclass fastcode/helloworld-secrets, error: SecretProviderClass.secrets-store.csi.x-k8s.io "helloworld-secrets" not found

and inside secret store provider logs:

secretproviderclasspodstatus_controller.go:99] "failed to patch secret owner ref" err="failed to get spc helloworld-secrets, err: SecretProviderClass.secrets-store.csi.x-k8s.io "helloworld-secrets" not found"

Both pod and SecretProviderClass are created with helm. SecretProviderClass and pods are in the same namespace

apiVersion: secrets-store.csi.x-k8s.io/v1
kind: SecretProviderClass
metadata:
  name: helloworld-secrets
spec:
  provider: aws
  parameters:
    objects: |
        - objectName: "/password/db"
          objectType: "ssmparameter"
          objectAlias: "dbpassword"
        - objectName: "/password/instance"
          objectType: "ssmparameter"
          objectAlias: "dbinstancepassword"
volumes:
      - name: secrets-store-inline
        csi:
          driver: secrets-store.csi.k8s.io
          readOnly: true
          volumeAttributes:
            secretProviderClass: "helloworld-secrets"

What should i do?

Thanks

  • Do the parameter store parameters exist, and do your pods have access to the parameter as well as any KMS key that would be needed to decrypt the values?

답변 없음

로그인하지 않았습니다. 로그인해야 답변을 게시할 수 있습니다.

좋은 답변은 질문에 명확하게 답하고 건설적인 피드백을 제공하며 질문자의 전문적인 성장을 장려합니다.

질문 답변하기에 대한 가이드라인

관련 콘텐츠