Comments (8)
@buettner123 actually these capabilities should go under moon:options
key. I.e. you create a capability called moon:options
and then put a HashMap<String, Object> inside with all capabilities from your example. https://github.com/aerokube/moon-cloud-java-example/blob/master/src/test/java/com/aerokube/moon/MoonCloudExampleTest.java#L25-L31
from moon.
Thanks for the hint @vania-pooh. This helped to get the video recording starting.
However I encountered some AccessDenied issues with the saving to the bucket. I think there might be some missing/incomplete documentation for the serviceAccount stuff.
Looking at the values file for the helm chart, I see that it suggest adding:
configs:
default:
serviceAccountName: aerokube-moon
serviceAccountAnnotations: {...}
However, digging into the helm chart I found out that this is actually supposed to be placed on the quota level and the one on config.default.serviceAccount*
level doesn't seem to have any effect.
My values.yml now looks like this:
quota:
moon: null
test:
namespace: moon-test
password: ''
serviceAccountName: aerokube-moon
serviceAccountAnnotations: {
"eks.amazonaws.com/role-arn": "arn:aws:iam::xxxx:role/MoonIAMRole"
}
With this changes and by providing the role-arn to the service account, it works fine for my eks+iam roles and service account setup.
Maybe it makes sense to adjust the default values.yml file to reflect this or add some more context to the documentation in https://aerokube.com/moon/latest/#faq-kubernetes-service-account
And for the sake of completeness, I adapted the above IAM policy a bit to feature less actions:
{
"Version": "2012-10-17",
"Statement": [
{
"Action": [
"s3:PutObject",
"s3:ListBucket",
"s3:GetObject"
],
"Effect": "Allow",
"Resource": [
"arn:aws:s3:::${TargetBucket}/*",
"arn:aws:s3:::${TargetBucket}"
]
}
]
}
In addition, TargetBucket is replaced with the bucket name on creation of the policy.
from moon.
@buettner123 started fixing this and can't find an exact location where we suggest adding the following:
configs:
default:
serviceAccountName: aerokube-moon
serviceAccountAnnotations: {...}
Only found correct example. Could you please provide some reference?
from moon.
For the serviceAccountName there is https://github.com/aerokube/charts/blob/master/moon2/values.yaml#L350 which seems to have no effect.
The configs.default.serviceAccountAnnotations
was an assumption from my side not reflected in the values file (but would make sense in my opinion, if there will be some defaults available)
from moon.
from moon.
@buettner123 just to be sure, were you able to fix this?
from moon.
@buettner123 just to be sure, were you able to fix this?
yes, I was able to resolve it with your hints, just tried to point out the unclear documentation.
from moon.
Ok, closing then.
from moon.
Related Issues (20)
- Monitoring: queued metric is calculated incorrectly
- Clipboard functionality does not work as expected
- VNC server does not start on Openshift
- Moon UI Console HOT 1
- Improve new Moon UI VNC performance HOT 1
- VNC container does not start in Openshift HOT 1
- Document `vnc-server-openshift` image HOT 1
- Slack sign-in page cannot be launched with Chrome browser on moon HOT 4
- Watch users file for changes in moon-basic-auth container
- File download and list API for Playwright, Cypress, Devtools HOT 2
- VNC image for Openshift is broken HOT 1
- Chrome and edge sessions are not created HOT 3
- Ability to specify livenessProbe for moon-conf container HOT 1
- Video recording with sound
- Slow down of tests - Debugging HOT 4
- Too long pod name when using Playwright latest images HOT 1
- Document new Selenium capabilities
- Unknown error: session deleted because of page crash HOT 1
- Add Feature to Export HAR File After Test Run
- 404 page not found when running Cypress test
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from moon.