Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

unsupported role: "Instance" errors with EC2 join method #13677

Closed
nklaassen opened this issue Jun 21, 2022 · 0 comments · Fixed by #13706
Closed

unsupported role: "Instance" errors with EC2 join method #13677

nklaassen opened this issue Jun 21, 2022 · 0 comments · Fixed by #13706
Assignees
Labels
bug regression test-plan-problem Issues which have been surfaced by running the manual release test plan

Comments

@nklaassen
Copy link
Contributor

Expected behavior:
Nodes can use the EC2 join method with no error logs.

Current behavior:
The following is logged once per minute:

2022-06-21T01:34:42Z INFO [PROC:1]    Joining the cluster with a secure token. pid:10387.1 service/connect.go:576
2022-06-21T01:34:42Z INFO [AUTH]      Attempting registration via proxy server. auth/register.go:177
2022-06-21T01:34:42Z INFO [AUTH]      Attempting registration with auth server. auth/register.go:177
2022-06-21T01:34:42Z WARN [AUTH]      Joining cluster without validating the identity of the Auth Server. This may open you up to a Man-In-The-Middle (MITM) attack if an attacker can gain privileged network access. To remedy this, use the CA pin value provided when join token was generated to validate the identity of the Auth Server. auth/register.go:333
2022-06-21T01:34:42Z ERRO [PROC:1]    Instance failed to establish connection to cluster: unsupported role: "Instance", Post "https://teleport.cluster.local/v2/tokens/register": remote error: tls: internal error. pid:10387.1 service/connect.go:106

Bug details:

@fspmarshall I'm not sure what the "Instance" role does or if this currently breaks anything, but we'll need to fix this, the logs are not nice and it's failing to get certs for the "Instance" role. The EC2 join method does a uniqueness check here and does not know how to check if an "Instance" is unique.

@nklaassen nklaassen added bug test-plan-problem Issues which have been surfaced by running the manual release test plan regression labels Jun 21, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug regression test-plan-problem Issues which have been surfaced by running the manual release test plan
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants