#kops - February 2019

@Jan Any gotchas with implementing aws-iam-authenticator ? did you use https://github.com/cloudposse/terraform-aws-kops-iam-authenticator-config ?

heya

Using the geodesic flag? https://github.com/cloudposse/geodesic/blob/master/rootfs/templates/kops/default.yaml#L54

um shew let me think

I dont think so

let me see what we did

in the middle of a refactor, please remind me later

np 👍️

@Tim ball is on your court

@Tim has joined the channel

@Tim / @Jan How are you getting your kubecfg into place, that supports the aws-iam-authenticator ?

Yes we are using the cloudposse AWS IAM authenticator config map

Nice

The changes in the cluster config I have already seen on your side but it was removed

Will look into it tomorrow

How are you writing the kubecfg ?

Just adding the authentication webhook endpoint and installed a hook which pulls certs and stuff like that from s3

I have seen a commit on the cloudposse side doing exactly the same but it was removed ^^

Right now I don't have the cluster config here. But I can provide it to you tomorrow

Cool, just wondering as kops export kubecfg doesn’t contain the users block that uses aws-iam-authenticator so wondering how you are doing it

Got it. This is what I was referring to: https://github.com/cloudposse/geodesic/pull/345/files

Not sure how this does "fix iam authenticator"
But that's the config you need. Additional creating certificates and the config map

It says kubernetes comes with it by default but we were not able to get it working without these changes

https://github.com/kubernetes/kops/blob/master/docs/authentication.md#kopeio-authentication hmm

I love #variant

check this out

set the channel description: Discussions related to kops for kubernetes
Archive: https://archive.sweetops.com/kops/

Anyone have success launching t3.* instances with kops? https://github.com/kubernetes/kops/issues/5755

um

t3 medium and large

and c5 large

ok, are you on kops 1.11?

has anyone looked into using "App Mesh" with kops?