Kubernetes aws iam认证器未经授权

Kubernetes aws iam认证器未经授权,kubernetes,kops,amazon-eks,Kubernetes,Kops,Amazon Eks,我正在我的kops kubernetes群集中的aws iam验证器中设置角色映射。但是用户被拒绝访问 来自aws iam认证器pod的日志: time=“2019-02-18T17:52:18Z”level=warning msg=“拒绝访问”arn=“arn:aws:iam:::role/KubernetesView”client=“127.0.0.1:52256”error=“arn未映射:arn:aws:iam::role/KubernetesView”方法=POST路径=/authen

我正在我的kops kubernetes群集中的aws iam验证器中设置角色映射。但是用户被拒绝访问

来自aws iam认证器pod的日志:

time=“2019-02-18T17:52:18Z”level=warning msg=“拒绝访问”arn=“arn:aws:iam:::role/KubernetesView”client=“127.0.0.1:52256”error=“arn未映射:arn:aws:iam::role/KubernetesView”方法=POST路径=/authenticate

但该角色已映射到配置映射中:

$kubectl describe configmaps  aws-iam-authenticator |grep -A 5 ^server:
server:
  mapRoles:
  - roleARN: arn:aws:iam::<account id redacted>:role/KubernetesView
    username: kubernetes-view:{{SessionName}}
    groups:
    - system:masters
$kubectl描述配置映射aws iam身份验证程序| grep-一个5^服务器:
服务器:
地图角色:
-roleARN:arn:aws:iam:::角色/KubernetesView
用户名:kubernetes视图:{{SessionName}
组:
-系统:硕士
实际错误消息:

$kubectl获得吊舱-n kube系统 错误:您必须登录到服务器(未经授权)

time=“2019-02-18T17:52:18Z”level=warning msg=“拒绝访问”arn=“arn:aws:iam:::role/KubernetesView”client=“127.0.0.1:52256”error=“arn未映射:arn:aws:iam::role/KubernetesView”方法=POST路径=/authenticate

$kubectl描述配置映射aws iam身份验证程序| grep-一个5^服务器:
服务器:
地图角色:
-roleARN:arn:aws:iam:::角色/KubernetesView
用户名:kubernetes视图:{{SessionName}
组:
-系统:硕士
$kubectl获得吊舱-n kube系统 错误:您必须登录到服务器(未经授权)

$kubectl describe configmaps  aws-iam-authenticator |grep -A 5 ^server:
server:
  mapRoles:
  - roleARN: arn:aws:iam::<account id redacted>:role/KubernetesView
    username: kubernetes-view:{{SessionName}}
    groups:
    - system:masters