Milan Stikic

Hey @olemarkus thanks for the reply! We even tried deleting SA tokens but only that of cilium pods. Should we try recreating all SAs and Pods after enabling IRSA ?

Hi @olemarkus , unfortunately restarting pods and deleting SA tokens didn't solve our problem. cilium pods and cilium-operator pods are deployed as daemon set and deployment respectively. I tried deleting...

Hey, we ended up creating entirely new cluster and we don't see this problem anymore. pod-identity-webhook works as intended and service account are getting right aws permissions. To answer your...