search

awslabs / aws-servicebroker

AWS Service Broker
Apache License 2.0
468 stars 131 forks source link

K8s Service broker pod going into crashloopbackoff #121

Open mallikarjun-b-r opened 5 years ago

mallikarjun-b-r commented 5 years ago

I am trying to install aws service broker with helm after installing it fails and the service-broker pod goes into crashloopbackoff state and the logs say the following I0606 07:08:31.170474 1 util.go:195] Did not find 'aws_access_key' and 'aws_secret_key' in params, using default chain. I0606 07:08:31.170819 1 aws_sdk.go:71] Parameter 'target_role_name' not set. Not assuming role. I0606 07:08:31.170884 1 util.go:195] Did not find 'aws_access_key' and 'aws_secret_key' in params, using default chain. I0606 07:08:31.170960 1 aws_sdk.go:71] Parameter 'target_role_name' not set. Not assuming role. F0606 07:08:33.376182 1 main.go:94] RequestError: send request failed caused by: Post https://sts.amazonaws.com/: remote error: tls: access denied

jaymccon commented 5 years ago

I believe the code is trying to call sts:GetCallerIdentity at this point, can you confirm whether the configured user/role has been granted IAM permissions to this API ?

mallikarjun-b-r commented 5 years ago

Yes I am using the same credentials for aws cli as well

AshishThakur commented 5 years ago

I had the same error and was fixed using the keys/secrets of the IAM user which gets created via the CF template https://github.com/awslabs/aws-servicebroker/blob/master/setup/prerequisites.yaml.

riddhi2910 commented 5 years ago

@AshishThakur Can you please specify in details?