Running powerfulseal on AWS EKS

[powerfulseal]

Running powerfulseal on AWS EKS

[seeker89]

Hey, thanks for reaching out @jdamata !

I haven't used EKS, so I'm going to have to rely on you. From the error message, it sounds like it's successfully contacting the kubernetes api server (so your 'kubeconfig' is valid), but the user is not authorised to list nodes.

How did you generate the kubeconfig ? Does EKS generate it for you ?

I'm also wondering, if, for security reasons, they are not just disallowing that.

[jdamata]

EKS can generate the kubeconfig for you but I generated mine manually.
Its not blocked.

I think it might just be this: kubernetes-client/python-base#75

Im using kubernetes==8.0.1 and I can authenticate to the cluster with exported AWS credentials to grab a list of nodes:

#!/usr/bin/env python3
import kubernetes
import boto3
import os
from pprint import pprint

kubernetes.config.load_kube_config(os.path.abspath('REDACTED'))
v1 = kubernetes.client.CoreV1Api()
nodes = v1.list_node()
pprint(nodes)

[seeker89]

It is true, that we are using a very old version of kubernetes package. Would you like to upgrade it and take it for a spin ?

[jdamata]

Yup that looks better.

$ ./.tox/py37/bin/seal -v interactive --aws --inventory-kubernetes --ssh-allow-missing-host-keys --kubeconfig REDACTED --ssh-path-to-private-key REDACTED --remote-user ec2-user
2019-03-04 19:12:05 REDACTED powerfulseal[52492] INFO Creating kubernetes client with config REDACTED
2019-03-04 19:12:05 REDACTED powerfulseal.k8s.k8s_client[52492] INFO Initializing with config: REDACTED
2019-03-04 19:12:05 REDACTED powerfulseal[52492] INFO Building AWS driver
2019-03-04 19:12:05 REDACTED powerfulseal[52492] INFO Attempting to read the inventory from kubernetes
2019-03-04 19:12:05 REDACTED powerfulseal.clouddrivers.aws_driver[52492] INFO Synchronizing remote nodes
2019-03-04 19:12:05 REDACTED powerfulseal.clouddrivers.aws_driver[52492] INFO Synchronizing remote nodes
2019-03-04 19:12:07 REDACTED powerfulseal.clouddrivers.aws_driver[52492] INFO Fetched 43 remote servers
2019-03-04 19:12:23 REDACTED powerfulseal[52492] INFO STARTING INTERACTIVE MODE
(seal) $

[seeker89]

That's great. Would you like to do the honors and start a PR ? CI will run the tests suit.

[jdamata]

Thanks for the help Mikolaj
#97