配置文件中未指定Hyperkube apiserver区域

Question

因此，当我尝试使用aws作为云提供商来安装kubernetes时，我遇到了这个错误。我是用tried进行安装的，但我把范围缩小到了下面的命令，我尝试在hyperkube容器中手动执行该命令。我猜实际的错误来自于没有适当的iam角色。我正在努力获得一个，但这将需要一些时间。我还看到它显示没有在配置文件中指定区域。我真的不确定该在哪里指定它。有人能在这方面给我指个方向吗？另外，出于测试目的，我可以手动获取awa访问密钥和会话令牌。有没有办法让hyperkube使用它们？

root@15713968201f:/# /hyperkube apiserver --advertise-address=10.205.232.161 --etcd-servers=https://10.205.232.161:2379,https://10.205.235.70:2379 --etcd-quorum-read=true --etcd-cafile=/etc/ssl/etcd/ssl/ca.pem --etcd-certfile=/etc/ssl/etcd/ssl/node-ip-10-205-232-161.ec2.internal.pem --etcd-keyfile=/etc/ssl/etcd/ssl/node-ip-10-205-232-161.ec2.internal-key.pem --insecure-bind-address=127.0.0.1 --apiserver-count=2 --admission-control=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,ResourceQuota --service-cluster-ip-range=10.233.0.0/18 --service-node-port-range=30000-32767 --client-ca-file=/etc/kubernetes/ssl/ca.pem --basic-auth-file=/etc/kubernetes/users/known_users.csv --tls-cert-file=/etc/kubernetes/ssl/apiserver.pem --tls-private-key-file=/etc/kubernetes/ssl/apiserver-key.pem --token-auth-file=/etc/kubernetes/tokens/known_tokens.csv --service-account-key-file=/etc/kubernetes/ssl/apiserver-key.pem --secure-port=6443 --insecure-port=8080 --storage-backend=etcd3 --v=2 --allow-privileged=true --cloud-provider=aws --anonymous-auth=False I0817 22:08:00.258693 134 aws.go:762] Building AWS cloudprovider I0817 22:08:00.258810 134 aws.go:725] Zone not specified in configuration file; querying AWS metadata service Error: error setting the external host value: "aws" cloud provider could not be initialized: could not init cloud provider "aws": error finding instance i-045f83bfff733a224: error listing AWS instances: NoCredentialProviders: no valid providers in chain. Deprecated. For verbose messaging see aws.Config.CredentialsChainVerboseErrors Error: error setting the external host value: "aws" cloud provider could not be initialized: could not init cloud provider "aws": error finding instance i-045f83bfff733a224: error listing AWS instances: NoCredentialProviders: no valid providers in chain. Deprecated. For verbose messaging see aws.Config.CredentialsChainVerboseErrors

Answer 1

https://github.com/kubernetes/kubernetes/issues/11543

我敢打赌，您的节点iam角色没有足够的访问权限。我并不熟悉kubespray，但我认为上面的问题应该可以帮助你解决你的问题。

这是我重点关注的一点：

error finding instance i-045f83bfff733a224: error listing AWS instances: NoCredentialProviders: no valid providers in chain.