Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Make awscli instalation more configurable #1164

Closed
im-wanyama opened this issue Feb 1, 2023 · 4 comments
Closed

Make awscli instalation more configurable #1164

im-wanyama opened this issue Feb 1, 2023 · 4 comments
Assignees
Labels
enhancement New feature or request

Comments

@im-wanyama
Copy link

What would you like to be added:

Currently we can't run the install-worker.sh script because the base AMI we use is CIS hardened which prevents executable files from running within /tmp.

Could we make the process of installing awscli more configurable?

For example allowing the user to specify where they download/run the install executable or allowing to user to install awscli via yum, irrespective of what binary bucket they've specified.

Why is this needed:

This will allow users more flexibility in using the install-worker.sh script and account for variance in setup/requirements.

@cartermckinnon
Copy link
Member

Feel free to PR a change to the working directory if /tmp doesn't work for your use case: https://github.com/awslabs/amazon-eks-ami/blob/master/scripts/install-worker.sh#L130

Just make sure you rm the zip archive and extracted installer.

@ShibraAmin18
Copy link

ShibraAmin18 commented Feb 2, 2023

@cartermckinnon for CIS ami changed /tmp to /home/ec2-user and --bin-dir /bin/ to /usr/local/bin

sudo "${AWSCLI_DIR}/aws/install" --bin-dir /bin/

When using the image created with EKS node groups, cannot exec into or view pod logs.

Error from server: error dialing backend: dial tcp 10.10.71.57:10250: i/o timeout

@im-wanyama
Copy link
Author

Ah no problem, assign this issue to me and I'll make a PR

@cartermckinnon
Copy link
Member

Should be resolved by #1231

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

3 participants