If you have an EKS cluster, that EKS cluster will have an IAM Role associated with it.
Ensure that the Role has all permissions needed.
For example, if you need to create Volumes for k8s, it'll need the following Policy Attachment.
How did I find this out?
#kubernetes #AWS
First, I tried to create a PVC and noticed that it was in a Pending state
Next, I described the PVC to see what was going on and I saw this.
`kubectl describe pvc name_of_pvc -n namespace_name`
I saw that I wasn't authorized to do something, but it didn't tell me "what". Then, I noticed there was the authorization encryption code.
So I decoded it with the following command
`aws sts decode-authorization-message --encoded-message encryption_code_here`
After that, I was able to see the ACTUAL error
I then went into AWS IAM and searched for the IAM policies for volumes. I looked at the JSON and saw exactly what I needed
And just like that, I was good to go!
Share this Scrolly Tale with your friends.
A Scrolly Tale is a new way to read Twitter threads with a more visually immersive experience.
Discover more beautiful Scrolly Tales like this.