Ben Cressey
Ben Cressey
@diranged I'll check on that - #3612 has some kubelet updates but not 1.28.4 / 1.27.8 / 1.26.11 with that fix.
#3612 now has those versions, so I expect they'll go out in the next release.
> What do others think about documenting and codifying the requirement for the admin container to be superpowered? That makes sense to me. We could also have the entrypoint script...
Can you check `/etc/shadow` to see if the hash was applied? The login failure can happen if you hash the password with an algorithm that glibc in AL2 does not...
> Interestingly enough, the hash in `/etc/shadow` is not the same as the hash I placed in `user-data`. 🤔 I'd first try using `base64 -w0` on the input to ensure...
I've noticed this too with `aws-dev` and been wondering whether it makes sense to drop the shell and console services there. There are a couple of pieces missing, like the...
Even after that PR is merged, we need to keep the feature around until the next minor release, just in case there's a point release in the interim.
@alex-berger it is not automatic but the release process for 1.19.4 with the fix is getting under way now.
Resolving since 1.19.4 should have fixed this.
Resolving under the theory that this may have been fixed by #3804. If not, please re-open.