Я пытаюсь создать кластер EKS, используя eksctl, используя моего пользователя IAM.Я использую файл yaml для обеспечения всей конфигурации.При этом я получаю сообщение об ошибке
Содержимое файла yaml публикуется ниже:
apiVersion: eksctl.io/v1alpha5
kind: ClusterConfig
metadata:
name: testCluster1
region: us-east-2
nodeGroups:
- name: ng-1
instanceType: m5.large
iam:
serviceRoleARN: "arn:aws:sts::019751775207:assumed-
role/XYZ_Team_Access/Nabc.ysh@xyz.com "
Ошибка: Cluster / ControlPlane: CREATE_FAILED - «Имя службы в roleArn должно быть в области« iam ».(Сервис: AmazonEKS; Код состояния: 400; Код ошибки: InvalidParameterException; Идентификатор запроса: 56115c79-8909-11e9-a1da-85124a03f2a7) "
` Консольный вывод:
[?] using region us-east-2
[?] setting availability zones to [us-east-2c us-east-2a us-east- 2b]
[?] subnets for us-east-2c - public:192.168.0.0/19 private:192.168.96.0/19
[?] subnets for us-east-2a - public:192.168.32.0/19 private:192.168.128.0/19
[?] subnets for us-east-2b - public:192.168.64.0/19 private:192.168.160.0/19
[?] nodegroup "ng-1" will use "ami-04ea7cb66af82ae4a" [AmazonLinux2/1.12]
[?] creating EKS cluster "clusterAmol1" in "us-east-2" region
[?] 1 nodegroup (ng-1) was included
[?] will create a CloudFormation stack for cluster itself and 1 nodegroup stack(s)
[?] if you encounter any issues, check CloudFormation console or try 'eksctl utils describe-stacks --region=us-east-2 --name=clusterAmol1'
[?] 2 sequential tasks: { create cluster control plane "clusterAmol1", create nodegroup "ng-1" }
[?] building cluster stack "eksctl-clusterAmol1-cluster"
[?] deploying stack "eksctl-clusterAmol1-cluster"
[?] unexpected status "ROLLBACK_IN_PROGRESS" while waiting for CloudFormation stack "eksctl-clusterAmol1-cluster"
[?] fetching stack events in attempt to troubleshoot the root cause of the failure
[?] AWS::CloudFormation::Stack/eksctl-clusterAmol1-cluster: ROLLBACK_IN_PROGRESS - "The following resource(s) failed to create: [RouteTableAssociationPrivateUSEAST2B, RouteTableAssociationPrivateUSEAST2C, RouteTableAssociationPrivateUSEAST2A, RouteTableAssociationPublicUSEAST2A, RouteTableAssociationPublicUSEAST2C, RouteTableAssociationPublicUSEAST2B, ControlPlane, NATGateway]. . Rollback requested by user."
[?] AWS::EC2::SubnetRouteTableAssociation/RouteTableAssociationPrivateUSEAST2C: CREATE_FAILED - "Resource creation cancelled"
[?] AWS::EC2::SubnetRouteTableAssociation/RouteTableAssociationPublicUSEAST2C: CREATE_FAILED - "Resource creation cancelled"
[?] AWS::EC2::SubnetRouteTableAssociation/RouteTableAssociationPublicUSEAST2A: CREATE_FAILED - "Resource creation cancelled"
[?] AWS::EC2::NatGateway/NATGateway: CREATE_FAILED - "Resource creation cancelled"
[?] AWS::EC2::SubnetRouteTableAssociation/RouteTableAssociationPrivateUSEAST2A: CREATE_FAILED - "Resource creation cancelled"
[?] AWS :: EC2 :: SubnetRouteTableAssociation / RouteTableAssociationPublicUSEAST2B: CREATE_FAILED - «Создание ресурса отменено» [?] AWS :: EC2 :: SubnetRouteTableAssociation / RouteTableAssociationPrivateUSEAST2B: создание CREATE_FAILED :: Cluster: CREATE |: CREATE_FAILED - «Имя службы в roleArn должно иметь область« iam ».(Служба: AmazonEKS; Код состояния: 400; Код ошибки: InvalidParameterException; Идентификатор запроса: ae0ef6d8-8917-11e9-b12f-eb52e4e9e6af) "[?] AWS :: EC2 :: SubnetRouteTableAssociation / RouteTableAssociationPrivateUSEAST2_P_RATEATE_RISATE_RISATE_REGROID_RID_RID_RID_RID_RID_RID_RID_CROW?] AWS :: EC2 :: SubnetRouteTableAssociation / RouteTableAssociationPrivateUSEAST2A: CREATE_IN_PROGRESS - «Инициировано создание ресурса» [?] AWS :: EC2 :: SubnetRouteTableAssociation / RouteTableAssococationPrivateUSEAST2COOC_ROOST_ROOSTATE_ROOSTATE_CROTATE_CROTATE_CROCATE_CROTATE_RITATE_RID_RID_RID_RID_RID_RID_RID_ROOT_TOOR_CARE_CARERouteTableAssociationPublicUSEAST2C: CREATE_IN_PROGRESS - «Инициировано создание ресурса» [?] AWS :: EC2 :: SubnetRouteTableAssociation / RouteTableAssociationPublicUSEAST2A: CREATE_IN_PROGRESS - «Инициировано создание ресурса»?:: SubnetRouteTableAssociation / RouteTableAssociationPrivateUSEAST2B: CREATE_IN_PROGRESS [?] AWS :: EKS :: Кластер / Панель управления: CREATE_IN_PROGRESS [?] AWS ::EC2 :: SubnetRouteTableAssociation / RouteTableAssociationPrivateUSEAST2A: CREATE_IN_PROGRESS AWS :: EC2 :: SubnetRouteTableAssociation / RouteTableAssociationPublicUSEAST2B: CREATE_IN_PROGRESS - "Создание ресурсов Инициатор" AWS :: EC2 :: NatGateway / NATGateway [?] [?]: CREATE_IN_PROGRESS - "Создание ресурсов Инициатор" [?] AWS :: EC2 :: SubnetRouteTableAssociation / RouteTableAssociationPrivateUSEAST2C: CREATE_IN_PROGRESS [] AWS :: EC2 :: SubnetRouteTableAssociation / RouteTableAssociationPublicUSEAST2C:? CREATE_IN_PROGRESS [] AWS :: EC2 :: SubnetRouteTableAssociation / RouteTableAssociationPublicUSEAST2A: CREATE_IN_PROGRESS [] AWS :: EC2 :: NatGateway/ NATGateway: CREATE_IN_PROGRESS [?] AWS :: EC2 :: SubnetRouteTableAssociation / RouteTableAssococationPublicUSEAST2B: CREATE_IN_PROGRESS [?] AWS :: EC2 :: Подсеть / SubnetPrivateUSEAST2A: CREATE_COMPLET2: Subject_COMPLETE: CREET_COMPLETE |:: EC2 :: Подсеть / SubnetPrivateUSEAST2B: CREATE_COMPLETE [?] AWS :: EC2 :: Подсеть / SubnetPublicUSEAST2A: CREATE_COMPLETE [?]AWS :: EC2 :: Subnet / SubnetPublicUSEAST2C: CREATE_COMPLETE [?] AWS :: EC2 :: VPCGatewayAttachment / VPCGatewayAttachment: CREATE_COMPLETE [?] AWS :: EC2 :: Подсеть / SubnetPublicUSEAST2B: CREATE_ngressGroup:[?]: IngressInterNodeGroupSG CREATE_COMPLETE AWS :: EC2 :: SecurityGroupIngress / IngressInterNodeGroupSG: - [?]: [?] CREATE_IN_PROGRESS "создание ресурсов Инициатор" AWS :: EC2 :: SecurityGroupIngress / IngressInterNodeGroupSG CREATE_IN_PROGRESS AWS :: EC2 :: SecurityGroup / ControlPlaneSecurityGroup:CREATE_COMPLETE AWS :: EC2 :: SecurityGroup / ClusterSharedNodeSecurityGroup: CREATE_COMPLETE AWS :: EC2 :: SecurityGroup / ControlPlaneSecurityGroup: CREATE_IN_PROGRESS - "Ресурс создание Начатый" AWS :: EC2 :: SecurityGroup / ClusterSharedNodeSecurityGroup [?] [?] [?]: CREATE_IN_PROGRESS -«Инициировано создание ресурса» [?] AWS:: EC2 :: Route / PublicSubnetRoute: CREATE_IN_PROGRESS - «Инициировано создание ресурса»
[?] AWS :: EC2 :: Route / PublicSubnetRoute: CREATE_IN_PROGRESS
[?] AWS :: EC2 :: RouteTable / PrivateRouteTable: CREATE_COMPLETE
[?] AWS :: EC2 :: RouteTable / PublicRouteTable: CREATE_COMPLETE
[?] AWS :: EC2 :: VPCGatewayAttachment / VPCGatewayAttachment: CREATE_IN_PROGRESS - «Инициировано создание ресурса»
[?] AWS :: EC2 :: Subnet / SubnetPrivateUSEAST2C: CREATE_IN_PROGRESS - «Инициировано создание ресурса»
[?] AWS :: EC2 :: RouteTable / PrivateRouteTable: CREATE_IN_PROGRESS - «Инициировано создание ресурса»
[?] AWS :: EC2 :: Subnet / SubnetPrivateUSEAST2A: CREATE_IN_PROGRESS - «Инициировано создание ресурса»
[?] AWS :: EC2 :: Subnet / SubnetPrivateUSEAST2B: CREATE_IN_PROGRESS - «Инициировано создание ресурса»
[?] AWS :: EC2 :: Подсеть / SubnetPublicUSEAST2A: CREATE_IN_PROGRESS - «Инициировано создание ресурса»
[?] AWS :: EC2 :: RouteTable / PublicRouteTable: CREATE_IN_PROGRESS - «Инициировано создание ресурса»
[?] AWS :: EC2 :: Subnet / SubnetPublicUSEAST2C: CREATE_IN_PROGRESS - «Инициировано создание ресурса»
[?] AWS :: EC2 :: SecurityGroup / ControlPlaneSecurityGroup: CREATE_IN_PROGRESS
[?] AWS :: EC2 :: VPCGatewayAttachment / VPCGatewayAttachment: CREATE_IN_PROGRESS
[?] AWS :: EC2 :: Subnet / SubnetPrivateUSEAST2C: CREATE_IN_PROGRESS
[?] AWS :: EC2 :: RouteTable / PrivateRouteTable: CREATE_IN_PROGRESS
[?] AWS :: EC2 :: Subnet / SubnetPrivateUSEAST2B: CREATE_IN_PROGRESS
[?] AWS :: EC2 :: SecurityGroup / ClusterSharedNodeSecurityGroup: CREATE_IN_PROGRESS
[?] AWS :: EC2 :: Подсеть / SubnetPublicUSEAST2A: CREATE_IN_PROGRESS
[?] AWS :: EC2 :: RouteTable / PublicRouteTable: CREATE_IN_PROGRESS
[?] AWS :: EC2 :: Subnet / SubnetPublicUSEAST2B: CREATE_IN_PROGRESS - «Инициировано создание ресурса»
[?] AWS :: EC2 :: Subnet / SubnetPrivateUSEAST2A: CREATE_IN_PROGRESS
[?] AWS :: EC2 :: Подсеть / SubnetPublicUSEAST2C: CREATE_IN_PROGRESS
[?] AWS :: EC2 :: Подсеть / SubnetPublicUSEAST2B: CREATE_IN_PROGRESS
[?] AWS :: EC2 :: VPC / VPC: CREATE_COMPLETE
[?] AWS :: EC2 :: EIP / NATIP: CREATE_COMPLETE
[?] AWS :: EC2 :: InternetGateway / InternetGateway: CREATE_COMPLETE
[?] AWS :: EC2 :: EIP / NATIP: CREATE_IN_PROGRESS - «Инициировано создание ресурса»
[?] AWS :: EC2 :: InternetGateway / InternetGateway: CREATE_IN_PROGRESS - «Инициировано создание ресурса»
[?] AWS :: EC2 :: EIP / NATIP: CREATE_IN_PROGRESS
[?] AWS :: EC2 :: VPC / VPC: CREATE_IN_PROGRESS - «Инициировано создание ресурса»
[?] AWS :: EC2 :: InternetGateway / InternetGateway: CREATE_IN_PROGRESS
[?] AWS :: EC2 :: VPC / VPC: CREATE_IN_PROGRESS
[?] AWS :: CloudFormation :: Стек / eksctl-clusterAmol1-cluster: CREATE_IN_PROGRESS - «Инициировано пользователем»
[?] построение стека группы узлов "eksctl-clusterAmol1-nodegroup-ng-1"
[?] 2 ошибки произошли и кластер не был создан должным образом, вы можете проверить консоль CloudFormation
[?] чтобы очистить ресурсы, запустите 'eksctl delete cluster --region = us-east-2 --name = clusterAmol1'
[?] ожидание стека CloudFormation "eksctl-clusterAmol1-cluster" для достижения статуса "CREATE_COMPLETE": ResourceNotReady: не удалось дождаться успешного состояния ресурса
[?] неверная конфигурация кластера: отсутствует CertificateAuthorityData
[?] не удалось создать кластер "clusterAmol1" `