uswitch/kiam issues and pull requests

#534 - Please release a v4.2.1 in order to fix vulns in the base Docker image :)

Issue - State: open - Opened by evanmcclure about 1 year ago

#534 - Please release a v4.2.1 in order to fix vulns in the base Docker image :)

Issue - State: open - Opened by evanmcclure about 1 year ago

#533 - [Snyk] Security upgrade alpine from 3.11 to 3.18.6

Pull Request - State: closed - Opened by rvu-snyk about 1 year ago

#532 - [Snyk] Security upgrade alpine from 3.11 to 3.16

Pull Request - State: closed - Opened by rvu-snyk about 1 year ago

#531 - [Snyk] Security upgrade alpine from 3.11 to 3.18.5

Pull Request - State: closed - Opened by rvu-snyk about 1 year ago

#530 - Fix service-portname bug for istio

Pull Request - State: closed - Opened by yuzhiquantubi over 1 year ago

#529 - [Snyk] Security upgrade alpine from 3.11 to 3.16.7

Pull Request - State: closed - Opened by rvu-snyk over 1 year ago

#528 - AIRSHIP-3244 abandon kiam

Pull Request - State: closed - Opened by giorgia-amici over 1 year ago

#528 - AIRSHIP-3244 abandon kiam

Pull Request - State: closed - Opened by giorgia-amici over 1 year ago

#527 - [Snyk] Security upgrade alpine from 3.11 to 3.18.3

Pull Request - State: closed - Opened by rvu-snyk over 1 year ago

#526 - [Snyk] Security upgrade alpine from 3.11 to 3.18.4

Pull Request - State: closed - Opened by rvu-snyk over 1 year ago

#525 - Bump google.golang.org/grpc from 1.36.0 to 1.53.0

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago - 1 comment
Labels: dependencies

#524 - Bump golang.org/x/sys from 0.0.0-20201214210602-f9fddec55a1e to 0.1.0

Pull Request - State: closed - Opened by dependabot[bot] almost 2 years ago - 1 comment
Labels: dependencies

#523 - Bump golang.org/x/net from 0.0.0-20201216054612-986b41b23924 to 0.7.0

Pull Request - State: closed - Opened by dependabot[bot] almost 2 years ago - 1 comment
Labels: dependencies

#522 - Bump github.com/prometheus/client_golang from 1.8.0 to 1.11.1

Pull Request - State: closed - Opened by dependabot[bot] about 2 years ago - 1 comment
Labels: dependencies

#521 - Security issue: nodes can receive IAM credentials for other nodes' pods

Issue - State: open - Opened by JayBeale about 2 years ago - 1 comment

#520 - Fix for Arn validation and parsing, fixes issue#519

Pull Request - State: closed - Opened by preflightsiren over 2 years ago

#519 - Malformed role causes panic

Issue - State: open - Opened by preflightsiren over 2 years ago

#518 - KIAM not displaying all metadata metrics

Issue - State: open - Opened by antikhv over 2 years ago

#517 - helm: fix example for server args

Pull Request - State: closed - Opened by a7i over 2 years ago

#516 - Kiam security issue

Issue - State: open - Opened by iangcarroll over 2 years ago - 3 comments

#515 - Compatibility with EKS 1.21 and token service account expiry

Issue - State: open - Opened by tomsucho almost 3 years ago - 4 comments

#514 - Issue#410 plus isob

Pull Request - State: closed - Opened by ryphon almost 3 years ago

#513 - Migration tips/hints for IRSA

Issue - State: open - Opened by jess-belliveau almost 3 years ago - 3 comments

#512 - Critical vulnerabilites in Alpine 3.11 with libcrpto and libssl modules.

Issue - State: open - Opened by brentski about 3 years ago

#511 - Multi arch image

Pull Request - State: closed - Opened by amandal-cn about 3 years ago

#510 - kiam-server `remote error: tls: bad certificate` error

Issue - State: closed - Opened by BuffaloWill over 3 years ago - 1 comment

#509 - Kiam to be Maintenance only going forward

Pull Request - State: closed - Opened by Joseph-Irving over 3 years ago - 1 comment

#508 - kiam iptables rules broken on AWS EKS... sometimes

Issue - State: closed - Opened by adq over 3 years ago - 1 comment

#507 - upgrade to v1.20 libraries, fixes issue#484

Pull Request - State: closed - Opened by jjo over 3 years ago

#506 - Add STS Session Tagging support through the use of pod annotations.

Pull Request - State: closed - Opened by michaelmcallister over 3 years ago - 3 comments

#505 - Help needed for Kiam on an AWS Kops cluster

Issue - State: open - Opened by ankur6ue over 3 years ago - 3 comments

#504 - Fix protoc error when running `make docker`

Pull Request - State: closed - Opened by kevdowney over 3 years ago - 1 comment

#503 - Validate ARN format

Pull Request - State: closed - Opened by brenix over 3 years ago

#502 - Update v1beta1 RBAC resources to v1

Pull Request - State: closed - Opened by fhke over 3 years ago - 2 comments

#501 - Use v1 RBAC objects in helm chart

Pull Request - State: closed - Opened by fhke over 3 years ago - 2 comments

#500 - Helm chart uses deprecated v1beta1 RBAC objects

Issue - State: closed - Opened by fhke over 3 years ago

#499 - Pod IP cache Refresh causing incorrect iam role credentials

Issue - State: open - Opened by chaitushiva over 3 years ago - 1 comment

#498 - Getting 'The AWS Access Key Id you provided does not exist in our records' for dependent applications on node restart

Issue - State: open - Opened by pvnilesh over 3 years ago - 1 comment

#497 - NoCredentialsFound

Issue - State: closed - Opened by droctothorpe over 3 years ago - 1 comment

#496 - Context conceled and KiamCredentialError

Issue - State: closed - Opened by pjaak over 3 years ago - 4 comments

#495 - multi-architecture images (ARM64 support)

Issue - State: open - Opened by vgunapati over 3 years ago - 3 comments

#494 - can't deploy server.deployment.yaml, pods are pending

Issue - State: open - Opened by mocart2 over 3 years ago

#493 - Update deprecated API versions for kube 1.22

Pull Request - State: closed - Opened by harshal-shah over 3 years ago - 2 comments

#492 - How dynamic loading of TLS certificates works

Issue - State: open - Opened by sumit-joshi-mt over 3 years ago

#491 - kiam-server broken in v4.1

Issue - State: open - Opened by mestuddtc over 3 years ago - 5 comments

#490 - Accept metadata role name request without trailing slash

Pull Request - State: closed - Opened by dzoeteman over 3 years ago

#489 - Adding new podlabels can break kiam-agent daemonset

Issue - State: open - Opened by harshal-shah over 3 years ago

#488 - AccessDenied: User: arn:aws:sts::ACCOUNT_NUMBER:assumed-role/<ROLE>/<INSTANCE_ID> is not authorized to perform: ...

Issue - State: closed - Opened by rmgpinto over 3 years ago - 1 comment

#487 - Add agent.dnsConfig to Helm chart values

Pull Request - State: closed - Opened by KevinSnyderCodes over 3 years ago - 1 comment

#486 - PDB for server deployment

Pull Request - State: closed - Opened by mikhailadvani over 3 years ago

#485 - PDB for server deployment

Issue - State: open - Opened by mikhailadvani over 3 years ago

#484 - Events missing on pods due to use of deprecated metadata.selfLink

Issue - State: closed - Opened by AlexLast over 3 years ago - 3 comments

#483 - KIAM 3.3+ fails to grant role in Azure

Issue - State: open - Opened by joseph-burns over 3 years ago - 6 comments

#482 - Use new CI creds

Pull Request - State: closed - Opened by rhysemmas over 3 years ago - 1 comment

#481 - kiam chart 6.1.0 doesn't seem to be published

Issue - State: closed - Opened by joshsleeper over 3 years ago - 1 comment

#480 - Unable to specify DNS authority

Issue - State: open - Opened by toothbrush over 3 years ago

#479 - Force TLS 1.2+

Issue - State: open - Opened by 2rs2ts over 3 years ago - 1 comment

#478 - Airship Owner Labels

Pull Request - State: closed - Opened by rvu-sre[bot] over 3 years ago - 1 comment

#477 - Pods don't assume roles in eks private cluster (private subnets)

Issue - State: closed - Opened by georgestoian almost 4 years ago - 2 comments

#476 - Docs update: make it clear agent and server can not run on same node

Issue - State: open - Opened by robvadai almost 4 years ago - 3 comments

#475 - Ngninx ingress port conflict 8181

Issue - State: open - Opened by robvadai almost 4 years ago

#474 - Added helm chart value option to disable strict namespace regexp mode introduced in V4

Pull Request - State: closed - Opened by wcarlsen almost 4 years ago

#473 - K8s Security improvement: Drop unused capabilities in kiam kubernetes deployments

Pull Request - State: closed - Opened by harrisjoseph almost 4 years ago

#472 - Regularly build images to pull in security patches from Base Image

Issue - State: open - Opened by albuch almost 4 years ago

#471 - Requesting additional docs around the exposed metrics

Issue - State: open - Opened by ryan-dyer-sp almost 4 years ago

#470 - Helm Chart: Enabling Service Monitors Causes Duplicate Metrics

Issue - State: open - Opened by jhwbarlow almost 4 years ago - 1 comment

#469 - KIAM integration with EKS container Insights.

Issue - State: open - Opened by vishalmaheswari almost 4 years ago

#468 - Helm readme has an issue

Issue - State: open - Opened by kolesnikovIV almost 4 years ago - 2 comments

#467 - fix readme

Pull Request - State: closed - Opened by kolesnikovIV almost 4 years ago - 1 comment

#466 - Introduce multiarch docker image build

Pull Request - State: closed - Opened by commixon almost 4 years ago - 6 comments

#465 - Use new CI creds

Pull Request - State: closed - Opened by rhysemmas almost 4 years ago - 1 comment

#464 - Unmatched iptables rule

Issue - State: open - Opened by bwells almost 4 years ago - 1 comment

#463 - feat(helm): add prometheus rule support

Pull Request - State: closed - Opened by eddycharly almost 4 years ago - 1 comment

#462 - Support specifying tags passed to AssumeRole

Issue - State: open - Opened by bburky about 4 years ago - 3 comments

#461 - Kiam-Server Terminates with Completed Status

Issue - State: open - Opened by efowel about 4 years ago - 3 comments

#460 - Clarify meaning of "Responses from mocked out metadata handlers"

Issue - State: open - Opened by rehevkor5 about 4 years ago

#459 - Adding ARN prefix for assumeRoleArn automatically

Pull Request - State: closed - Opened by njuettner about 4 years ago - 4 comments

#458 - About the cache time for each credentials

Issue - State: closed - Opened by wd about 4 years ago - 1 comment

#457 - change helm init repo to charts.helm.sh

Pull Request - State: closed - Opened by Joseph-Irving about 4 years ago - 4 comments

#456 - Update Helm chart repo

Issue - State: closed - Opened by pingles about 4 years ago - 4 comments

#455 - fixing two typos in readme

Pull Request - State: closed - Opened by frodopwns about 4 years ago

#454 - Arm64-based Docker images

Issue - State: open - Opened by sondinhnwv about 4 years ago - 3 comments

#453 - Update Dockerfile ahead of v4

Issue - State: open - Opened by pingles about 4 years ago

#452 - Kiam returning incorrect credentials to pods

Issue - State: closed - Opened by sagardesai0094 about 4 years ago - 5 comments

#450 - Create tests to prove recover of gRPC keep-alive

Issue - State: open - Opened by pingles about 4 years ago

#449 - Update gRPC version

Issue - State: closed - Opened by pingles about 4 years ago - 1 comment

#445 - kiam cert-manager rolling update needed ?

Issue - State: open - Opened by liorco300 about 4 years ago - 2 comments

#441 - gRPC Resolution

Pull Request - State: closed - Opened by pingles over 4 years ago - 1 comment

#439 - Helm chart v4 release compatibility

Pull Request - State: closed - Opened by stefansedich over 4 years ago - 10 comments

#438 - Helm chart changes for v4 release

Issue - State: closed - Opened by stefansedich over 4 years ago

#425 - Agent stuck with log "resolver returned no addresses"

Issue - State: closed - Opened by avdhoot over 4 years ago - 20 comments
Labels: bug

#423 - Adding maxUnavailable for daemonsets

Pull Request - State: closed - Opened by gregsidelinger over 4 years ago - 1 comment

#420 - Adding annotations for daemonset and deployment

Pull Request - State: closed - Opened by gregsidelinger over 4 years ago - 1 comment

#414 - Add documentation about AWS cross-account IAM use case

Pull Request - State: closed - Opened by 123BLiN over 4 years ago - 1 comment

#413 - Pods not picking up roles on EKS

Issue - State: open - Opened by byakku over 4 years ago - 2 comments

#410 - kiam fails to resolve regional sts endpoint in us-iso-east-1 and us-isob-east-1

Issue - State: closed - Opened by GraceAtwood over 4 years ago - 7 comments
Labels: bug

#398 - IMDSv2 Requests Causing Context Cancelled

Issue - State: open - Opened by dmizelle almost 5 years ago - 26 comments

#392 - Installing Kaim in K8s in outside AWS - "failed to get EC2 IAM info"

Issue - State: open - Opened by morgoved almost 5 years ago - 5 comments

#389 - Check session token before handing out roles with the metadata API

Pull Request - State: closed - Opened by rbvigilante almost 5 years ago

GitHub / uswitch/kiam issues and pull requests