3개 답변
- 최신
- 최다 투표
- 가장 많은 댓글
1
In the end, this is what worked for us to migrate from a ConfigMap authentication mode to API only without downtime
With a long delay (days) between each task:
- update the cluster from CONFIG_MAP to API_AND_CONFIG_MAP (this will create access entries for Fargate and managed node groups), do not touch the ConfigMap content
- create our own access entries for accounts needing them, still without updating the ConfigMap content
- switch the cluster to API only
- delete the aws-auth ConfigMap, as it is no longer needed
답변함 한 달 전
1
This is not a good answer, but it appears that by deleting and re-recreating the Fargate profiles, everything starts working again
답변함 2달 전
0
I can confirm the same behavior after recently migrating to access entries. I can also confirm the "workaround" of deleting the fargate profiles and recreating them works to resolve it but it is not ideal and may not be possible for all workloads.
Still, thanks to @NIGo for that nudge.
답변함 2달 전