Jason Charcalla
Jason Charcalla
@airmonitor Did you use the same service account in the above test? I see that you have it defined as `kubecost-sa` in the Trust policy and SA definition of your...
I must have overlooked that, I will test using a different service account. Are you still seeing the `InvalidIdentityToken: No OpenIDConnect provider found in your account` error in your logs?
We have a new [RC](https://github.com/kubecost/cost-analyzer-helm-chart/releases) available but you would have to specifically request that version in your helm install command. It's possible the logs rotated and the original error is...
Your trust policy looks correct. To trouble shoot this further would you able to send a [bug report](https://github.com/kubecost/docs/blob/main/bug-report.md) to [[email protected]](mailto:[email protected]). The `unable to get addresses:` error is typically due to...
@TomaszSzusterTR Not sure if this will help in your scenario but we recently encountered an issue where a production AWS account required an extra `sts:AssumeRole` to be added to the...
@airmonitor I'm following up to see if you were you able to get your OIDC / service account authentication working correctly?
@airmonitor, I apologize for the inconvenience. Can you send a [bug report](https://github.com/kubecost/docs/blob/main/bug-report.md) to [[email protected]](mailto:[email protected]) for us to review this issue further.
@PatTheSilent Can you share which error you are seeing? There are a two warnings which are common but do not necessarily indicate an issue with OIDC or IAM policys. These...
@dwbrown2, In my tests replacing the `/models/aws.json` with a custom config map did result in changes of the `kubecost_network_zone_egress_cost`, `kubecost_network_internet_egress_cost`, `node_cpu_hourly_cost` and `node_ram_hourly_cost` metrics. The `pv_hourly_cost` metric appears to have...