Kubernetes aws iam认证器未经授权
我正在我的kops kubernetes群集中的aws iam验证器中设置角色映射。但是用户被拒绝访问 来自aws iam认证器pod的日志: time=“2019-02-18T17:52:18Z”level=warning msg=“拒绝访问”arn=“arn:aws:iam:::role/KubernetesView”client=“127.0.0.1:52256”error=“arn未映射:arn:aws:iam::role/KubernetesView”方法=POST路径=/authenticate 但该角色已映射到配置映射中:Kubernetes aws iam认证器未经授权,kubernetes,kops,amazon-eks,Kubernetes,Kops,Amazon Eks,我正在我的kops kubernetes群集中的aws iam验证器中设置角色映射。但是用户被拒绝访问 来自aws iam认证器pod的日志: time=“2019-02-18T17:52:18Z”level=warning msg=“拒绝访问”arn=“arn:aws:iam:::role/KubernetesView”client=“127.0.0.1:52256”error=“arn未映射:arn:aws:iam::role/KubernetesView”方法=POST路径=/authen
$kubectl describe configmaps aws-iam-authenticator |grep -A 5 ^server:
server:
mapRoles:
- roleARN: arn:aws:iam::<account id redacted>:role/KubernetesView
username: kubernetes-view:{{SessionName}}
groups:
- system:masters
$kubectl描述配置映射aws iam身份验证程序| grep-一个5^服务器:
服务器:
地图角色:
-roleARN:arn:aws:iam:::角色/KubernetesView
用户名:kubernetes视图:{{SessionName}
组:
-系统:硕士
实际错误消息:
$kubectl获得吊舱-n kube系统
错误:您必须登录到服务器(未经授权)
time=“2019-02-18T17:52:18Z”level=warning msg=“拒绝访问”arn=“arn:aws:iam:::role/KubernetesView”client=“127.0.0.1:52256”error=“arn未映射:arn:aws:iam::role/KubernetesView”方法=POST路径=/authenticate
$kubectl描述配置映射aws iam身份验证程序| grep-一个5^服务器:
服务器:
地图角色:
-roleARN:arn:aws:iam:::角色/KubernetesView
用户名:kubernetes视图:{{SessionName}
组:
-系统:硕士
$kubectl获得吊舱-n kube系统
错误:您必须登录到服务器(未经授权)
$kubectl describe configmaps aws-iam-authenticator |grep -A 5 ^server:
server:
mapRoles:
- roleARN: arn:aws:iam::<account id redacted>:role/KubernetesView
username: kubernetes-view:{{SessionName}}
groups:
- system:masters