We're using in production with AWS EKS and struggl...
# infisical-feedback
w
We're using in production with AWS EKS and struggling to get the CSI to work with infisical. Other than that its a great product works well with K8s
v
What problem are you experiencing?
w
Hey Vlad! I posted in help but I think it got missed. We're using EKS and Infisical with the CSI deployment and Kubernetes auth on the Infisical side. We've boiled it down to the fact that the EKS API wont accept the token with Infisical as the audience and according to AWS the EKS api wont accept any audience that is not the default K8s audience
I attempted to use AWS Auth on the infisical side, but the CSI agent only supports K8s auth so this also doesnt work
r
@Will Turner curious if your EKS API is public facing or private? I posted in the help channel related to an error but seeing this you might be able to answer my question just based on your setup. 🙂
w
Hey @Richard Thake, its public facing but unfortunately I'm still stuck in the same spot
👍 1
s
Hey @Will Turner! We have recently just released an update to the CSI provider which will allow you to use the default audience configured in your cluster. You will need to upgrade to the latest helm release of the Infisical CSI provider. https://infisical.com/docs/integrations/platforms/kubernetes-csi#configuration-for-environments-without-custom-audience-support
w
Thanks @Sheen Santos Capadngan, I'll get this tested and get back to you!
@Sheen Santos Capadngan Tested and this now works great! Appreciate the assistance. Would you like me to do a PR to update the documentation for the CSI Agent?