better-cat-13994
11/01/2023, 3:07 PMpython flow.py --with retry argo-workflows create
But as I try to submit the workflow in Argo, I get the following error message
fatal error: Unable to locate credentials
Failed to download code package from <s3://bucket-name/metaflow/FlowName>
Looking into the manifest, I see that my secret for accessing my MinIO storage gets loaded through envFrom so I'm unsure why the credentials cannot be found.
Any inputs? thank you š¤
(Note: I have already validated my artifact repository set-up with a classic hello world test)better-cat-13994
11/01/2023, 4:01 PMbetter-cat-13994
11/10/2023, 5:31 PMMETAFLOW_KUBERNETES_SECRETS in the Container Env (see screenshot). Maybe I am not on the right track with this, you tell me š
Locally on VS-Code, trying to debug:
⢠I also tried to use the debug tool and run the flow with just the --with kubernetes option. (I also tried specifying all configurations secrets, serviceaccount, namespace) The pod always fails with a Datastore error: message. I do not see the METAFLOW_KUBERNETES_SECRETS when doing describe on it
⢠When I run aws s3 ls --endpoint-url my_endpoint (my_endpoint being a representative name of the http), the connection works, so the issue is not coming from a misconfigured endpoint
I have also read over all the posts on this slack for similar issues. The following solutions were proposed:
⢠a kubernetes secret such as described here for Airflow-Metaflow example:
⦠I have a secret configured, which I reference with the metaflow variable (Following the example mentioned, I do not have the metaflow helm chart installed, but this should not be necessary, right?)
⢠checking service accounts:
⦠there I am not sure. I have given all argo-related service accounts admin rights (not best practice but this can be fixed later) to manage objects. however, there is no service account value set in the Env of the container on Argo (see screenshot), so could this be tied to the issue?
⢠let me know if i missed anything else
Apologies for the long message but I have tried several things and have not yet figured out why the credentials for my s3 store aren't available to the pod being launched.
I was going to book an office hour to discuss it but it seems you've suspended that for the moment
Thank you so much š ā