[juju 3.1.1] kubernetes-worker failed: "aws-relation-joined" hook, unauthorized
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Canonical Juju |
Invalid
|
Undecided
|
Unassigned | ||
Kubernetes Control Plane Charm |
Fix Released
|
High
|
George Kraft | ||
Kubernetes Worker Charm |
Fix Released
|
High
|
George Kraft |
Bug Description
In testrun https:/
-------
2023-03-17 13:31:09 INFO unit.kubernetes
2023-03-17 13:31:09 INFO unit.kubernetes
2023-03-17 13:31:09 INFO unit.kubernetes
2023-03-17 13:31:09 ERROR unit.kubernetes
Traceback (most recent call last):
File "/var/lib/
bus.
File "/var/lib/
_invoke(
File "/var/lib/
handler.
File "/var/lib/
self.
File "/var/lib/
self.
File "/var/lib/
with urlopen(
File "/usr/lib/
return opener.open(url, data, timeout)
File "/usr/lib/
response = meth(req, response)
File "/usr/lib/
response = self.parent.error(
File "/usr/lib/
return self._call_
File "/usr/lib/
result = func(*args)
File "/usr/lib/
raise HTTPError(
urllib.
-------
Further analysis will follow.
Crashdumps and configs can be found here:
https:/
Changed in charm-kubernetes-worker: | |
milestone: | none → 1.27 |
Changed in charm-kubernetes-master: | |
importance: | Undecided → High |
assignee: | nobody → George Kraft (cynerva) |
milestone: | none → 1.27 |
status: | New → In Progress |
Changed in charm-kubernetes-master: | |
status: | In Progress → Fix Committed |
Changed in charm-kubernetes-worker: | |
status: | In Progress → Fix Committed |
Changed in charm-kubernetes-master: | |
status: | Fix Committed → Fix Released |
Changed in charm-kubernetes-worker: | |
status: | Fix Committed → Fix Released |
The failing HTTP call is in interface- aws-integration [1], which is trying to reach the AWS instance metadata service[2].
It looks like interface- aws-integration is trying to use IMDSv1, but a change in Juju[3] for 3.1.1 makes it so that AWS instances created by Juju are no longer allowed to use IMDSv1. We will need to update interface- aws-integration to support IMDSv2.
[1]: https:/ /github. com/juju- solutions/ interface- aws-integration /blob/d8d8c7ef1 7c99ad53383f3ca bf4cf5c8191d16f 7/requires. py#L121 /docs.aws. amazon. com/AWSEC2/ latest/ UserGuide/ ec2-instance- metadata. html /github. com/juju/ juju/pull/ 15166
[2]: https:/
[3]: https:/