amazon-web-services - 配置文件中未指定 Hyperkube apiserver 区域

Question

因此，在尝试使用 aws 作为云提供商安装 kubernetes 时出现此错误。我正在使用 kubespray 进行安装，但我将其范围缩小到以下命令，我尝试在 hyperkube 容器中手动执行该命令。我猜实际错误来自没有适当的 iam 角色。我正在努力获得一个，但这需要一些时间。我还看到它说配置文件中未指定区域。我不确定在哪里指定它。有人可以指出我正确的方向吗？也只是为了测试目的，我可以手动获取 awa 访问 key 和 session token 。有没有办法让 hyperkube 使用这些？

root@15713968201f:/# /hyperkube apiserver --advertise-address=10.205.232.161 --etcd-servers=https://10.205.232.161:2379,https://10.205.235.70:2379 --etcd-quorum-read=true --etcd-cafile=/etc/ssl/etcd/ssl/ca.pem --etcd-certfile=/etc/ssl/etcd/ssl/node-ip-10-205-232-161.ec2.internal.pem --etcd-keyfile=/etc/ssl/etcd/ssl/node-ip-10-205-232-161.ec2.internal-key.pem --insecure-bind-address=127.0.0.1 --apiserver-count=2 --admission-control=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,ResourceQuota --service-cluster-ip-range=10.233.0.0/18 --service-node-port-range=30000-32767 --client-ca-file=/etc/kubernetes/ssl/ca.pem --basic-auth-file=/etc/kubernetes/users/known_users.csv --tls-cert-file=/etc/kubernetes/ssl/apiserver.pem --tls-private-key-file=/etc/kubernetes/ssl/apiserver-key.pem --token-auth-file=/etc/kubernetes/tokens/known_tokens.csv --service-account-key-file=/etc/kubernetes/ssl/apiserver-key.pem --secure-port=6443 --insecure-port=8080 --storage-backend=etcd3 --v=2 --allow-privileged=true --cloud-provider=aws --anonymous-auth=False
I0817 22:08:00.258693 134 aws.go:762] Building AWS cloudprovider
I0817 22:08:00.258810 134 aws.go:725] Zone not specified in configuration file; querying AWS metadata service
Error: error setting the external host value: "aws" cloud provider could not be initialized: could not init cloud provider "aws": error finding instance i-045f83bfff733a224: error listing AWS instances: NoCredentialProviders: no valid providers in chain. Deprecated.
For verbose messaging see aws.Config.CredentialsChainVerboseErrors
Error: error setting the external host value: "aws" cloud provider could not be initialized: could not init cloud provider "aws": error finding instance i-045f83bfff733a224: error listing AWS instances: NoCredentialProviders: no valid providers in chain. Deprecated.
For verbose messaging see aws.Config.CredentialsChainVerboseErrors


Answer 1

https://github.com/kubernetes/kubernetes/issues/11543

我愿意打赌您的节点 iam 角色没有足够的访问权限。我不熟悉 kubespray，但我认为上述问题应该可以帮助您解决问题。

这是我关注的一点:

error finding instance i-045f83bfff733a224: error listing AWS instances: NoCredentialProviders: no valid providers in chain.