cannot run kubectl commands in deployment scripts

Question

I am trying to run kubectl commands through deployment scripts in codebuild. A build pipeline service role is created with appropriate permissions. However, while executing the kubectl commands, it gives permission denied error. What am I missing?

Accepted Answer

I understand that you are running kubectl command in your codebuild buildspec , so you need to make sure that your IAM service role used by your codebuild is added in aws-auth config map of eks cluster.

Let's say, your codebuld service arn is "arn:aws:iam:::role/service-role/codebuild-test-service-role", then role arn without path (ex.  "arn:aws:iam:::role/codebuild-test-service-role") need to be added in aws-auth configmap of EKS Cluster.

To provide the access to IAM role in aws-auth configmap, you can refer [AWS document](https://docs.aws.amazon.com/eks/latest/userguide/add-user-role.html), which will help to understand how aws-auth configmap can be updated.

Hope this helps.

cannot run kubectl commands in deployment scripts

Relevant content