aws / aws/credentials-fetcher

Bug V2.0.1 version - New tasks failing with RPC error code failing to cleanup existing kerberos files 🔴

Open
#218 17 comments 0 reactions 0 assignees View on GitHub
Dominant language
Go
Stars
133
Forks
34
PR merge metrics
No merged PRs in 30d

Description

- We were early adopters of https://github.com/aws/credentials-fetcher/releases/tag/v.2.0.1 and we performed a thorough testing on our end
- We observed a newly introduced critical issue where new tasks failed to launch on the host with error.

` rpc error: code = Unknown desc = failed to remove Kerberos file: remove /var/credentials-fetcher/krbdir/efa19bd3b98aca8a1772/gAp50SurveysR: directory not empty`

- There is no workaround for this issue and the service containers die rapidly
- This is a critical issue and should be stopped from rolling out in the AMI

Let us know in case there are more questions

Contributor guide

Open the contributing guide

Research direction

Start by reproducing the new-task launch failure reported after credentials-fetcher v2.0.1, focusing on the cleanup error for the Kerberos file under /var/credentials-fetcher/krbdir. Trace why cleanup encounters a non-empty directory and verify that service containers launch successfully without the RPC error.

Written by the indexing model from the issue text.

Assessment

Tech stack
go
Domain
authentication, backend
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
38/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.