-
Notifications
You must be signed in to change notification settings - Fork 10
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
connecting to wrong sts endpoint https://sts..amazonaws.com #100
Comments
Hello, There is a problem finding the correct address for the AWS STS service. It should be sts.us-east-1.amazonaws.com (or It could be related to the AWS authentication method used. I'd be happy to help you solve this deployment problem. Can you share more context about your deployment:
And test the following steps:
Thanks, |
Hello @Sampathreddygopireddy118, Do you still have an issue with STS? If yes, can you apply suggestions from my previous message. If there is no update, I will close the issue by the end of the week to avoid outdated issues. Thanks, |
When a value is entered into AWSAssumeRoleArn in prometheus-rds-exporter.yaml, the following error occurs:
If the ARN value is not entered, the issue does not occur. 0.6.0 ver. |
the issue will also occur when fetch metrics from AWS China, since the domain name for AWS China is amazonaws.com.cn rather then amazonaws.com |
The AWS SDK should use amazonaws.com.cn domain automatically. To make it work you need to set Do you still have the issue with these parameters? |
Closing this request as it looks like it has been resolved with last comment. |
Describe the bug
I'm using your helm chart and I have passed the assume role
PROMETHEUS_RDS_EXPORTER_AWS_ASSUME_ROLE_ARN: arn:aws:iam::00000000:role/rds-exporter
and I see it is trying to get the GetCallerIdentity it is trying with wrong sts end point. below is the log{"time":"2023-12-27T18:17:04.653877227Z","level":"DEBUG","msg":"Assume role","role":"arn:aws:iam::00000000:role/rds-exporter"}
{"time":"2023-12-27T18:17:04.653954968Z","level":"DEBUG","msg":"search AWS region using IMDS"}
{"time":"2023-12-27T18:17:04.656602818Z","level":"INFO","msg":"found AWS region via IMDS","region":"us-east-1"}
{"time":"2023-12-27T18:17:04.658949862Z","level":"ERROR","msg":"can't identify AWS account and/or region","reason":"can't fetch information about current session: operation error STS: GetCallerIdentity, get identity: get credentials: failed to refresh cached credentials, operation error STS: AssumeRole, https response error StatusCode: 0, RequestID: , request send failed, Post "https://sts..amazonaws.com/\": dial tcp: lookup sts..amazonaws.com: no such host"}
A clear and concise description of what the bug is.
wrong sts end point
Desktop (please complete the following information):
To Reproduce
add env parametes as below in the vaules.yaml
env:
PROMETHEUS_RDS_EXPORTER_DEBUG: "true"
PROMETHEUS_RDS_EXPORTER_AWS_ASSUME_ROLE_ARN: arn:aws:iam::00000000:role/rds-exporter
PROMETHEUS_RDS_EXPORTER_AWS_ASSUME_ROLE_SESSION: "rds-exporter"
Steps to reproduce the behavior
Expected behavior
A clear and concise description of what you expected to happen.
It has to connect to https://sts.amazonaws.com
Additional context
sts endpoint has 2 dots (..)
Add any other context about the problem here.
The text was updated successfully, but these errors were encountered: