Problem with Amazon EBS CSI Driver Node Driver Registrar after moving to EKS 1.25

Question

I installed aws-ebs-csi-driver
```
eksctl get addon --name aws-ebs-csi-driver --cluster 
```

```
NAME			VERSION			STATUS	ISSUES	IAMROLE							UPDATE AVAILABLE
aws-ebs-csi-driver	v1.16.0-eksbuild.1	ACTIVE	0	arn:aws:iam:::role/AmazonEKS_EBS_CSI_DriverRole
```

When I look at the objects it created, the container *node-driver-registrar* under the pod *ebs-csi-node* keeps on crashing.

I'am unable to get the logs because I was having another issue below when running kubectl logs command.

> Internal error occurred: Authorization error (user=kube-apiserver-kubelet-client, verb=get, resource=nodes, subresource=proxy)

![Enter image description here](/media/postImages/original/IM3AGVwKk6Tjm5ww0_zrShCg)

![Enter image description here](/media/postImages/original/IMgOAcMl7iRAeB4JBW3-_bbg)

Answer

It seems to be that the permissions are setup incorrectly. Could you try adding this ClusterRoleBinding Resource and test it once.

```
kind: ClusterRoleBinding
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  name: kubelet-api-admin
subjects:
- kind: User
  name: kubelet-api
  apiGroup: rbac.authorization.k8s.io
roleRef:
  kind: ClusterRole
  name: system:kubelet-api-admin
  apiGroup: rbac.authorization.k8s.io
```

Problem with Amazon EBS CSI Driver Node Driver Registrar after moving to EKS 1.25

関連するコンテンツ