googlecloudplatform / gke-vault-demo Goto Github PK

This demo is not working with Private GKE and on prem vault cluster, should i pass by proxy or any clue please @chrislovecnm

Hi there,
I've managed to successfully run the demo without any modifications before.
I tried to enable custom Service Account names and corresponding Vault auth roles, but am not able to get it to work.

Here are the changes I made:

• created Service Account

apiVersion: v1
kind: ServiceAccount
metadata:
  name: <my-new-sa-name>

• assigned name to application Pod in manifest

spec:
      serviceAccountName: <my-new-sa-name>

• create new Kubernetes auth role in Vault

vault write auth/kubernetes/role/<my-new-sa-name>-role \
  bound_service_account_names=<my-new-sa-name> \
  bound_service_account_namespaces=default \
  policies=<my-new-policy> \
  ttl=15m

note: my-new-policy is already created

When I ran kubectl logs <pod-name>-5wpxz vault-authenticator
Here is the error I got:

2019/05/03 06:27:22 failed to get successful response: &http.Response{Status:"500 Internal Server Error", StatusCode:500, Proto:"HTTP/2.0", ProtoMajor:2, ProtoMinor:0, Header:http.Header{"Cache-Control":[]string{"no-store"}, "Content-Type":[]string{"application/json"}, "Content-Length":[]string{"51"}, "Date":[]string{"Fri, 03 May 2019 06:27:22 GMT"}}, Body:http2.transportResponseBody{cs:(*http2.clientStream)(0xc4200a4780)}, ContentLength:51, TransferEncoding:[]string(nil), Close:false, Uncompressed:false, Trailer:http.Header(nil), Request:(*http.Request)(0xc420132000), TLS:(*tls.ConnectionState)(0xc420098580)}, {"errors":["service account name not authorized"]}

Is there some change elsewhere that I should be making?

Thanks for the help

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Rate-Limited

These updates are currently rate-limited. Click on a checkbox below to force their creation now.

• Update Terraform google to v6
• Update Terraform google-beta to v6
• Update Terraform http to v3
• Update Terraform tls to v4
• 🔐 Create all rate-limited PRs at once 🔐

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• Update Terraform google to ~> 2.20.0
• Update Terraform google-beta to ~> 2.20.0
• Update Terraform http to ~> 1.2.0
• Update Terraform kubernetes to ~> 1.13.0
• Update Terraform random to ~> 2.3.0
• Update Terraform template to ~> 2.2.0
• Update Terraform tls to ~> 2.2.0
• Update Terraform kubernetes to v2
• Update Terraform null to v3
• Update Terraform random to v3
• Click on this checkbox to rebase all open PRs at once

Detected dependencies

• Check this box to trigger a request for Renovate to run again on this repository