用于连接 Amazone EKS 的 Jenkins 代理不起作用

Question

我尝试在我的 Jenkins 中配置 Kubernetes 代理，以便使用 Jenkins 管道部署微服务。我使用 eksctl 命令创建了 Amazone EKS 集群。集群创建后，创建了一个 kubeconfig 文件，用于在 Jenkins 中配置秘密文件凭证。

当我尝试将我的 kubernetes 代理连接到我的集群时出现错误：

Error testing connection https://<CLUSTER>.sk1.eu-west-3.eks.amazonaws.com: Failure executing: GET at: https://<CLUSTER>.sk1.eu-west-3.eks.amazonaws.com/api/v1/namespaces/default/pods. Message: pods is forbidden: User "system:anonymous" cannot list resource "pods" in API group "" in the namespace "default". Received status: Status(apiVersion=v1, code=403, details=StatusDetails(causes=[], group=null, kind=pods, name=null, retryAfterSeconds=null, uid=null, additionalProperties={}), kind=Status, message=pods is forbidden: User "system:anonymous" cannot list resource "pods" in API group "" in the namespace "default", metadata=ListMeta(_continue=null, remainingItemCount=null, resourceVersion=null, selfLink=null, additionalProperties={}), reason=Forbidden, status=Failure, additionalProperties={}).

Answer 1

您的 config 机密没有足够的权限执行基本任务。请在您的服务帐户中绑定以下角色，您在配置密码中使用的令牌。请关注这个

kind: Role
apiVersion: rbac.authorization.k8s.io/v1beta1
metadata:
  namespace: default
  name: jenkins-master
rules:
- apiGroups: [""]
  resources: ["pods"]
  verbs: ["create","delete","get","list","patch","update","watch"]
- apiGroups: [""]
  resources: ["pods/exec"]
  verbs: ["create","delete","get","list","patch","update","watch"]
- apiGroups: [""]
  resources: ["pods/log"]
  verbs: ["get","list","watch"]
- apiGroups: [""]
  resources: ["events"]
  verbs: ["get","list","watch"]
- apiGroups: [""]
  resources: ["secrets"]
  verbs: ["get"]
---
apiVersion: rbac.authorization.k8s.io/v1beta1
kind: RoleBinding
metadata:
  name: jenkins-master
  namespace: default
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: Role
  name: jenkins-master
subjects:
- kind: ServiceAccount
  name: jenkins-master //replace your service account name

有关详细信息，请遵循此 article。

用于连接 Amazone EKS 的 Jenkins 代理不起作用

Jenkins agent for connecting Amazone EKS not work

jenkins

kubernetes

amazon-eks