community
community copied to clipboard
[efs-controller] Encrypted EFS filesystem never reaches synced status
Describe the bug
I'm trying to create a FileSystem
resource that is encrypted with a custom KMS key with accompanying MountTarget
s and AccessPoint
, but there are various issues:
- The
FileSystem
CR is stuck increating
state while in AWS console the resource appears ready and available - If using the
fileSystemRef
forMountTarget
andAccessPoint
resources they are never created as the controller does not consider the targetFileSystem
resource ready ("the referenced resource is not synced yet.")
Steps to reproduce
- Attempt to create a
FileSystem
resource - Attempt to create
MountTarget
andAccessPoint
resources withfileSystemRef
pointing at FileSystem resource - FileSystem resource state is stuck in "creating"
Expected outcome
- The
FileSystem
resource should become "ready" after it is successfully created and its status in AWS console is "Available". - The
MountTarget
andAccessPoint
resources should be created as soon as theFileSystem
resource is created and has an ARN
Environment
- Kubernetes version:
v1.30.4-eks-a737599
- Using EKS (yes/no), if so version?
yes
- AWS service targeted (S3, RDS, etc.)
EFS