getting eks fargate profile creation error

0

while EKS fargate profile creation, added multiple trust policy including eks-fargate-pods.amazonaws.com Service Principal but still getting this error: InvalidParameterException: Misconfigured PodExecutionRole Trust Policy; Please add the eks-fargate-pods.amazonaws.com Service Principal Any idea how to fix this issue

Raj
已提问 4 个月前314 查看次数
1 回答
0

You need add the eks-fargate-pods.amazonaws.com Service Principal," typically occurs during the creation of an AWS EKS Fargate profile when the trust relationship for the PodExecutionRole is not correctly set up to allow the eks-fargate-pods.amazonaws.com service principal.

Please find the steps by step instruction as mention in below

Step 1: Go to the IAM console in AWS. Locate the PodExecutionRole you are using for your EKS Fargate profile. Check the trust relationships of this role. It should have a trust relationship with the eks-fargate-pods.amazonaws.com service principal. Step 2:Update the Trust Relationship:

Step 3: If the eks-fargate-pods.amazonaws.com service principal is not listed, you will need to add it.

Edit the trust relationship to include the following policy:

{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Principal": { "Service": "eks-fargate-pods.amazonaws.com" }, "Action": "sts:AssumeRole" } ] }

profile picture
Jagan
已回答 4 个月前
  • I have added this trust policy, but still seeing this issue. It only fails using EKSCTL cli command (eksctl create fargateprofile -f common-fargate.yaml) but successful through AWS console. My yaml syntax as follows:

    apiVersion: eksctl.io/v1alpha5 kind: ClusterConfig metadata: name: <eks-cluster-name> region: us-east-1 fargateProfiles:

    • name: common-fargate-runner selectors:
      • namespace: '*-runners' labels: label: common-fargate-runner podExecutionRoleArn: 'arn:aws:iam::<aws-ac>:role/aws-role-name'

您未登录。 登录 发布回答。

一个好的回答可以清楚地解答问题和提供建设性反馈,并能促进提问者的职业发展。

回答问题的准则