静态公网IP无法创建AKS负载均衡

Question

我已经遵循了https://docs.microsoft.com/en-us/azure/aks/static-ip链接中提到的步骤。

我得到了下面的错误。

  Warning  ListPublicIPs           22s (x4 over 57s)  azure-cloud-provider  network.PublicIPAddressesClient#List: Failure responding to request: StatusCode=403 -- Original Error: autorest/azure: Service returned an error. Status=403 Code="AuthorizationFailed" Message="The client 'f76e0cc5-db5a-459a-bd4e-8c8d7b453f05' with object id 'f76e0cc5-db5a-459a-bd4e-8c8d7b453f05' does not have authorization to perform action 'Microsoft.Network/publicIPAddresses/read' over scope '/subscriptions/166aaa5b-86d9-49d7-b7cc-2bf38cc91490/resourceGroups/myResourceGroup/providers/Microsoft.Network' or the scope is invalid. If access was recently granted, please refresh your credentials."
  Warning  SyncLoadBalancerFailed  22s (x4 over 57s)  service-controller    Error syncing load balancer: failed to ensure load balancer: network.PublicIPAddressesClient#List: Failure responding to request: StatusCode=403 -- Original Error: autorest/azure: Service returned an error. Status=403 Code="AuthorizationFailed" Message="The client 'f76e0cc5-db5a-459a-bd4e-8c8d7b453f05' with object id 'f76e0cc5-db5a-459a-bd4e-8c8d7b453f05' does not have authorization to perform action 'Microsoft.Network/publicIPAddresses/read' over scope '/subscriptions/166aaa5b-86d9-49d7-b7cc-2bf38cc91490/resourceGroups/myResourceGroup/providers/Microsoft.Network' or the scope is invalid. If access was recently granted, please refresh your credentials."

Answer 1

您可能是在错误的资源组中创建的，也可能是您没有将其授予AKS集群的权限

因此，基本上您需要授予贡献者对以下应用程序的权限:这个作用域上的f76e0cc5-db5a-459a-bd4e-8c8d7b453f05：/subscriptions/166aaa5b-86d9-49d7-b7cc-2bf38cc91490/resourceGroups/myResourceGroup