EKS csi secret store driver not finding SecretProviderClass

0

I'm trying to use parameter store and secret manager in my EKS cluster but i keep getting this error:

MountVolume.SetUp failed for volume "secrets-store-inline" : rpc error: code = Unknown desc = failed to get secretproviderclass fastcode/helloworld-secrets, error: SecretProviderClass.secrets-store.csi.x-k8s.io "helloworld-secrets" not found

and inside secret store provider logs:

secretproviderclasspodstatus_controller.go:99] "failed to patch secret owner ref" err="failed to get spc helloworld-secrets, err: SecretProviderClass.secrets-store.csi.x-k8s.io "helloworld-secrets" not found"

Both pod and SecretProviderClass are created with helm. SecretProviderClass and pods are in the same namespace

apiVersion: secrets-store.csi.x-k8s.io/v1
kind: SecretProviderClass
metadata:
  name: helloworld-secrets
spec:
  provider: aws
  parameters:
    objects: |
        - objectName: "/password/db"
          objectType: "ssmparameter"
          objectAlias: "dbpassword"
        - objectName: "/password/instance"
          objectType: "ssmparameter"
          objectAlias: "dbinstancepassword"
volumes:
      - name: secrets-store-inline
        csi:
          driver: secrets-store.csi.k8s.io
          readOnly: true
          volumeAttributes:
            secretProviderClass: "helloworld-secrets"

What should i do?

Thanks

  • Do the parameter store parameters exist, and do your pods have access to the parameter as well as any KMS key that would be needed to decrypt the values?

沒有答案

您尚未登入。 登入 去張貼答案。

一個好的回答可以清楚地回答問題並提供建設性的意見回饋,同時有助於提問者的專業成長。

回答問題指南