Replies: 1 comment
-
We don't support Azure AD Pode Identity anymore with this repo. This deployment hasn't been tested with AAD Pod Identity as that is currently deprecated in favor of workload identity. Since it hasn't been tested and is out of scope for the Microsoft Learn content that this repo supports, we cannot help you unfortunately. But maybe someone else here in the Discussions can. |
Beta Was this translation helpful? Give feedback.
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
Previously we tried for K8 v 1.23.5 this setup worked. now we updated the k8 version to v1.24.9 and aad-pod-identity/nmi:v1.8.14.
ingress-controller deployment failed due to a mounting issue. Below is a sample error log. Do we need to change anything from this repo as per version upgrade?
Type Reason Age From Message
Normal Scheduled 21m default-scheduler Successfully assigned ingress-nginx/ingress-nginx-controller-674cb79584-4vhft to aks-npsystem-12407744-vmss000000
Warning FailedMount 21m (x4 over 21m) kubelet MountVolume.SetUp failed for volume "webhook-cert" : secret "ingress-nginx-admission" not found
Warning FailedMount 19m kubelet Unable to attach or mount volumes: unmounted volumes=[secrets-store-inline], unattached volumes=[kube-api-access-jk7mz webhook-cert secrets-store-inline]: timed out waiting for the condition
Warning FailedMount 3m53s (x3 over 17m) kubelet Unable to attach or mount volumes: unmounted volumes=[secrets-store-inline], unattached volumes=[secrets-store-inline kube-api-access-jk7mz webhook-cert]: timed out waiting for the condition
Warning FailedMount 99s (x5 over 15m) kubelet Unable to attach or mount volumes: unmounted volumes=[secrets-store-inline], unattached volumes=[webhook-cert secrets-store-inline kube-api-access-jk7mz]: timed out waiting for the condition
Warning FailedMount 51s (x11 over 20m) kubelet MountVolume.SetUp failed for volume "secrets-store-inline" : rpc error: code = Unknown desc = failed to mount secrets store objects for pod ingress-nginx/ingress-nginx-controller-674cb79584-4vhft, err: rpc error: code = Unknown desc = failed to mount objects, error: failed to get keyvault client: failed to get authorizer for keyvault client: nmi response failed with status code: 404, response body: getting assigned identities for pod ingress-nginx/ingress-nginx-controller-674cb79584-4vhft in CREATED state failed after 16 attempts, retry duration [5]s, error: . Check MIC pod logs for identity assignment errors
Beta Was this translation helpful? Give feedback.
All reactions