From 47aaf2ef4b1614e5b26c5a1de4e934e0387ae2d6 Mon Sep 17 00:00:00 2001 From: Zvika Nadav Date: Tue, 12 Jul 2022 10:47:27 -0500 Subject: [PATCH] fix: iamlive in csm mode (#763) --- .github/workflows/e2e-parallel-full.yml | 18 ++++++++---------- 1 file changed, 8 insertions(+), 10 deletions(-) diff --git a/.github/workflows/e2e-parallel-full.yml b/.github/workflows/e2e-parallel-full.yml index a9b26189eb..cf1c3d18b2 100644 --- a/.github/workflows/e2e-parallel-full.yml +++ b/.github/workflows/e2e-parallel-full.yml @@ -61,14 +61,14 @@ jobs: role-duration-seconds: 3600 role-session-name: GithubActions-Session - - name: Iamlive Setup + - name: Iamlive Setup & Run run: | #!/bin/bash set -eox pipefail wget -O iamlive.tar.gz "https://github.com/iann0036/iamlive/releases/download/${{ env.IAMLIVE_VERSION }}/iamlive-${{ env.IAMLIVE_VERSION }}-linux-amd64.tar.gz" tar -xzf iamlive.tar.gz chmod +x iamlive - IAMLIVE_PID=$(./iamlive --mode proxy --bind-addr 0.0.0.0:10080 --output-file ${HOME}/policy.json --refresh-rate 1 --sort-alphabetical --force-wildcard-resource --background) + IAMLIVE_PID=$(./iamlive --mode csm --output-file ${HOME}/policy.json --refresh-rate 1 --sort-alphabetical --force-wildcard-resource --background) echo "iamlive_pid=$IAMLIVE_PID" >> $GITHUB_ENV - name: Setup Terraform @@ -81,10 +81,9 @@ jobs: working-directory: ${{ matrix.example_path }} run: | terraform init -upgrade=true - export HTTP_PROXY=http://127.0.0.1:10080 - export HTTPS_PROXY=http://127.0.0.1:10080 - export AWS_CA_BUNDLE="${HOME}/.iamlive/ca.pem" - export NO_PROXY=eks.amazonaws.com,github.io,fairwinds.com,crossplane.io,github.com,agones.dev,karpenter.sh,githubusercontent.com,storage.googleapis.com + export AWS_CSM_ENABLED=true + export AWS_CSM_PORT=31000 + export AWS_CSM_HOST=127.0.0.1 terraform apply -target=module.vpc -no-color -input=false -auto-approve terraform apply -target=module.eks_blueprints -no-color -input=false -auto-approve terraform apply -target=module.eks_blueprints_kubernetes_addons -no-color -input=false -auto-approve @@ -95,10 +94,9 @@ jobs: working-directory: ${{ matrix.example_path }} run: | terraform init -upgrade=true - export HTTP_PROXY=http://127.0.0.1:10080 - export HTTPS_PROXY=http://127.0.0.1:10080 - export AWS_CA_BUNDLE="${HOME}/.iamlive/ca.pem" - export NO_PROXY=eks.amazonaws.com,github.io,fairwinds.com,crossplane.io,github.com,agones.dev,karpenter.sh,githubusercontent.com,storage.googleapis.com + export AWS_CSM_ENABLED=true + export AWS_CSM_PORT=31000 + export AWS_CSM_HOST=127.0.0.1 terraform destroy -target=module.eks_blueprints_kubernetes_addons -no-color -input=false -auto-approve terraform destroy -target=module.eks_blueprints -no-color -input=false -auto-approve terraform destroy -no-color -input=false -auto-approve