Juju unable to add a k8s 1.24 k8s cloud

Bug #1969645 reported by Stone Preston
12
This bug affects 2 people
Affects Status Importance Assigned to Milestone
Canonical Juju
Fix Released
High
Yang Kelvin Liu

Bug Description

Juju 2.9.28-ubuntu-amd64 is unable to add a k8s cloud if using a 1.24 k8s cluster. The following error is encountered when running the add-k8s command:

juju add-k8s my-k8s-cloud --controller my-controller --storage vsphere-vcp
ERROR making juju admin credentials in cluster: max duration exceeded: secret for service account "juju-credential-cbf48c9d" not found

This is because service account secrets are no longer automatically created by default: https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.24.md#no-really-you-must-read-this-before-you-upgrade

It seems juju is relying on this behavior in order to create a k8s cloud, but since the secret is not created automatically it fails.

George Kraft (cynerva)
description: updated
Ian Booth (wallyworld)
Changed in juju:
milestone: none → 2.9.29
importance: Undecided → High
status: New → Triaged
assignee: nobody → Yang Kelvin Liu (kelvin.liu)
Changed in juju:
status: Triaged → In Progress
Revision history for this message
Adam Dyess (addyess) wrote :

As a workaround:

> juju config kubernetes-control-plane controller-manager-extra-args=feature-gates=RotateKubeletServerCertificate=true,LegacyServiceAccountTokenNoAutoGeneration=false

Revision history for this message
Yang Kelvin Liu (kelvin.liu) wrote :
Changed in juju:
status: In Progress → Fix Committed
Changed in juju:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.