Hey folks, bit of a specific question related to k...
# ask-metaflow
s
Hey folks, bit of a specific question related to kubernetes service accounts and passing iam roles to the pods running the metaflow tasks
✅ 1
I am using the helm charts provided in metaflow-tools and have overridden the annotations specified here to include my arn role for s3 access (e.g. iam.amazonaws.com/role: <arn:>) Do I also need to override the podsAnnotations?
im still having issues accessing s3 from my pods aws does not seem to even be configured when i ssh into them
a
ah -
slim
images don't include dependencies like
wget
,
curl
etc. that metaflow needs to boot the container task. can you try with a normal python image?
the chart referenced here is for deploying the metadata service. happy to jump on a call to walk you through the setup!
s
i can try, but i don't think the issue is with missing dependencies. I modified MetafowEnviroment to print out more detailed error messages
error i got was "fatal error: unable to locate credentials"
but yeah if you have time, would be happy to jump on a call
a
sure
let me dm you
s
looks like setting the annotations for the jobset from the kubernetes client did the trick! thanks Savin!
among us party 1