Hi, I installed eks 1.23 with tf and metrics-server with helm, in metrics-server logs I have:
serving.go:342] Generated self-signed cert (/tmp/apiserver.crt, /tmp/apiserver.key) ││ I0525 13:06:59.591442 1 requestheader_controller.go:169] Starting RequestHeaderAuthRequestController ││ I0525 13:06:59.591466 1 shared_informer.go:240] Waiting for caches to sync for RequestHeaderAuthRequestController ││ I0525 13:06:59.591513 1 configmap_cafile_content.go:201] “Starting controller” name=“client-ca::kube-system::extension-apiserver-authentication::client-ca-file” ││ I0525 13:06:59.591531 1 shared_informer.go:240] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::client-ca-file ││ I0525 13:06:59.591574 1 configmap_cafile_content.go:201] “Starting controller” name=“client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file” ││ I0525 13:06:59.591585 1 shared_informer.go:240] Waiting for caches to sync for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file ││ I0525 13:06:59.592024 1 secure_serving.go:267] Serving securely on [::]:4443 ││ I0525 13:06:59.592065 1 dynamic_serving_content.go:131] “Starting controller” name=“serving-cert::/tmp/apiserver.crt::/tmp/apiserver.key” ││ I0525 13:06:59.592187 1 tlsconfig.go:240] “Starting DynamicServingCertificateController” ││ W0525 13:06:59.592292 1 shared_informer.go:372] The sharedIndexInformer has started, run more than once is not allowed ││ I0525 13:06:59.692076 1 shared_informer.go:247] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::requestheader-client-ca-file ││ I0525 13:06:59.692136 1 shared_informer.go:247] Caches are synced for RequestHeaderAuthRequestController ││ I0525 13:06:59.692227 1 shared_informer.go:247] Caches are synced for client-ca::kube-system::extension-apiserver-authentication::client-ca-file ││ E0525 13:07:33.746831 1 authentication.go:63] “Unable to authenticate the request” >err=“verifying certificate SN= failed: x509: certifi ││ cate signed by unknown authority”
I tried with step:
but no luck, I want to set role with step:
but I don’t know which role I should set, I don’t have role:
rolearn: arn:aws:iam::123456789123:role/kubernetes-devops
or maybe someone has another idea how to resolve my issue?