Comments (16)
Thank you for submitting a feature request to the AWS Private CA Issuer plugin. We will review the request and get back to you.
from aws-privateca-issuer.
I guess this could cause error: "standard_init_linux.go:228: exec user process caused: exec format error" on a Raspberry PI based cluster ?
from aws-privateca-issuer.
I have try on arm64, it's fine.
from aws-privateca-issuer.
Thank you for submitting the feature request to AWS Private CA Issuer plugin. We have reviewed your submission, and this feature request is not prioritized at this time. Currently we do not officially support ARM, our automation runs only for x86-64 based environments. We have captured your request as a potential enhancement for consideration on our roadmap.
In the interim, you are free to build the docker image and utilize it for your use case.
from aws-privateca-issuer.
hello guys am currious, after going through with setup for ssl in eks with private CA everything got issued and working but when i access the host through my nlb it doesnt really use the certificate. its not encrypted. Does it has to do with namespaces or, can someone help me out
from aws-privateca-issuer.
Hi @bashiru98 - this Github repository focuses on this Plugin. Questions about getting certificates to work with NLB are best directed at AWS support. AWS does have two guides up on enabling TLS encryption with this plugin:
- https://aws.amazon.com/blogs/containers/setting-up-end-to-end-tls-encryption-on-amazon-eks-with-the-new-aws-load-balancer-controller/
- https://aws.amazon.com/blogs/security/tls-enabled-kubernetes-clusters-with-acm-private-ca-and-amazon-eks-2/
Hope that helps!
from aws-privateca-issuer.
I have try on arm64, it's fine.
hi, so the pca image works on ARM based graviton instances ? can you share the image pls
from aws-privateca-issuer.
Not sure, how long it is gonna take. I think it is just a matter of choosing one more option while building docker image :-)
Anyways I tried the version "v1.2.2" and still getting the same error-
exec /manager: exec format error
from aws-privateca-issuer.
I tried version 1.2.4 and get the same error:
exec /manager: exec format error
If someone has instructions on building an image that could be deployed on bottlerocket, that'd be awesome.
from aws-privateca-issuer.
👍 to this... would like to see this support arm64
from aws-privateca-issuer.
(i should clarify... like @bkjones we're using the v1.2.4 release and it's failing with the same error...)
from aws-privateca-issuer.
Hi @diranged, thanks for the +1 on this request. We haven't prioritized this feature and don't have a date for it, yet. To help get this prioritized, would you be open to connecting on Slack so I can understand your use case and requirements better? You can reach me in our Kubernetes Slack channel #cert-manager-aws-privateca-issuer (https://kubernetes.slack.com/archives/C02FEDR3FN2) or directly message me there.
cc: @bkjones @parjun8840 @pkoteswar - I'd also love to connect with you with regards to this feature request.
from aws-privateca-issuer.
I think the simple answer here is that ARM processors are cheaper in general, and so we're moving most of our workloads to ARM... I just dislike having to explicitly run X86 nodes for something like this where performance is not critical.
from aws-privateca-issuer.
I am getting a similar issue with the helm chat, I am on EKS with Bottlerocket amazon/bottlerocket-aws-k8s-1.27-aarch64-v1.14.1-842c7134
the cert-manager-aws-privateca-issuer:latest failed to pull and unpack.
logs from aws-pca-issuer-aws-privateca-issuer pod:
Failed to pull image "public.ecr.aws/k1n1h4h4/cert-manager-aws-privateca-issuer:latest": rpc error: code = NotFound desc = failed to pull and unpack image "public.ecr.aws/k1n1h4h4/cert-manager-aws-privateca-issuer:latest": no match for platform in manifest: not found
any workaround to this?
from aws-privateca-issuer.
@ibrahimjelliti Right now, there is no workaround to this. This plugin currently only supports and tests with AL2.
from aws-privateca-issuer.
https://github.com/cert-manager/aws-privateca-issuer/releases/tag/v1.3.0
ARM support has been release! Closing this issue.
from aws-privateca-issuer.
Related Issues (20)
- [Feature Request]: Integration with cert-manager 1.10 HOT 4
- [Bug]: Using the default version causes image pull failures HOT 4
- Integration with cert-manager, istio-csr fails pod to pod mTLS. HOT 5
- [Bug]: Image Tag in Helm Chart doesn't match Contianer Image Tag HOT 9
- topologySpreadConstraints support in helm chart HOT 6
- [Bug]: cert-manager.io/cluster-issuer annotation does not work for AWSPCAClusterIssuer HOT 12
- [Feature Request]: helm chart: support optional podDisruptionBudget HOT 1
- [Feature Request]: Documentation of useage with ingress annotations HOT 2
- [Bug]: panic: runtime error: invalid memory address or nil pointer dereference HOT 8
- security HOT 3
- [Feature Request]: Support temporary AWS credentials (including AWS_SESSION_TOKEN) HOT 1
- [Bug]: Error: failed to sts.GetCallerIdentity when using IRSA HOT 11
- [Bug]: awspca-issuer not using secretRef to obtain CA HOT 7
- [Feature Request]: Issue image out of more official ECR Public Repo HOT 2
- [Feature Request]: Support ARM64 architecture HOT 4
- [Feature Request]: Add feature to call kubernetes secrets for the AWSPCAClusterIssuer spec.arn value HOT 3
- [Bug]: Issuer is not ready and certificate creation fails HOT 10
- [Bug]: Connection to AWS PCA not working HOT 5
- [Feature Request]: Replace deprecated `set-output` command with environment file HOT 1
- [Troubleshoot]: Reconciler error StorageError: invalid object, Code: 4 HOT 8
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from aws-privateca-issuer.