EnableEncryptionWithExternalKms enabed after the custome data in OSProfile length exceeds 87380

Open
#211 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Assessment

Difficulty
4/5
Estimated time
3-5 days
Newbie friendliness
25/100
Issue type
Bug
Clarity
Needs clarification
Activity status
Stale
Tech stack
azure, go
Domain
cloud, infrastructure

Research direction

Reproduce the failure with the listed aks-engine-azurestack.exe deploy command and the api-model containing enableEncryptionWithExternalKms. Inspect the generated OSProfile customData and its length against the reported 87380-character limit; done means the deployment succeeds with the external KMS setting enabled.

Written by the indexing model from the issue text.

Description

bug

Describe the bug

"error": {
    "code": "InvalidParameter",
    "message": "Custom data in OSProfile must be in Base64 encoding and with a maximum length of 87380 characters.",
    "target": "customData"
}

Steps To Reproduce
aks-engine-azurestack.exe deploy `

--azure-env AzureStackCloud --location local
--resource-group drillplan-etcd-playground-kms --api-model C:\aks\kubernetes-azurestack-kms.json
--output-directory c:\aks\drillplan-etcd-playground-kms --client-id <client-id>
--client-secret --subscription-id <su-id>
--identity-system adfs --force-overwrite

Expected behavior
deploy success.

AKS Engine version
Version: v0.77.0

Kubernetes version
1.25.7

Additional context

        "kubernetesConfig": {
            "enableEncryptionWithExternalKms": true,
            "cloudProviderBackoff": true,
            "cloudProviderBackoffRetries": 1,
            "cloudProviderBackoffDuration": 30,
            "cloudProviderRateLimit": true,
            "cloudProviderRateLimitQPS": 100,
            "cloudProviderRateLimitBucket": 150,
            "cloudProviderRateLimitQPSWrite": 25,
            "cloudProviderRateLimitBucketWrite": 30,
            "useCloudControllerManager": true,
            "useInstanceMetadata": false,
            "networkPlugin": "kubenet",
            "kubeletConfig": {
                "--node-status-update-frequency": "1m"
            },
            "controllerManagerConfig": {
                "--node-monitor-grace-period": "5m",
                "--pod-eviction-timeout": "5m",
                "--route-reconciliation-period": "1m"
            }
        }
Dominant language
Go
Stars
23
Forks
24
Avg merge
6d 21h
Merged PRs (30d)
3

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from Azure/aks-engine-azurestack

All issues in Azure/aks-engine-azurestack

Similar issues

More Go issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.