EKS AWS Load Balancer Controller -getting error while provisioning AWS ALB LBR in EKS

0

Hello All, to provision aws alb Ingress i am following below https://kubernetes-sigs.github.io/aws-load-balancer-controller/v2.5/ https://repost.aws/knowledge-center/eks-alb-ingress-controller-setup

After performing all steps i am getting below error

{"level":"error","ts":"2023-05-18T01:04:02Z","logger":"controllers.ingress","msg":"unable to determine AWS Shield subscription state, skipping AWS shield reconciliation","error":"AccessDeniedException: User: arn:**************************3935 is not authorized to perform: shield:GetSubscriptionState on resource: arn:aws:shield:::subscription/ because no permissions boundary allows the shield:GetSubscriptionState action"}

Can Anyone give me some insights around this??

Regards Anoop

1개 답변
0

Do you know what user "User: arn:**************************3935" is?
It seems that this user lacks the "field:GetSubscriptionState" permission, so why not try to set it up in IAM?

profile picture
전문가
답변함 일 년 전
profile picture
전문가
검토됨 한 달 전
  • Thanks for responding Rinku

    The User: arn:**************************3935 is associated to AWS ALB controller .........what sort of permission shall i require??? and why does that require that permission that is not clear to me

  • I don't know exactly either, but it may be that AWS Load Balancer Controller is getting information from AWS Shield and using it for DDos protection, etc. The only way to know for sure is to explore the information in the "AWS Load Balancer Controller". In the meantime, it would be a good idea to attach privileges to the user and see if the error disappears. The "GetSubscriptionState" is not a permission to delete or create anything, so there is little danger in attaching it.

로그인하지 않았습니다. 로그인해야 답변을 게시할 수 있습니다.

좋은 답변은 질문에 명확하게 답하고 건설적인 피드백을 제공하며 질문자의 전문적인 성장을 장려합니다.

질문 답변하기에 대한 가이드라인

관련 콘텐츠