aws-workshop-for-kubernetes icon indicating copy to clipboard operation
aws-workshop-for-kubernetes copied to clipboard

Publishing a Service will fail if using an AWS account without the AWSServiceRoleForElasticLoadBalancing already created

Open khuey opened this issue 5 years ago • 0 comments

At https://github.com/aws-samples/aws-workshop-for-kubernetes/tree/master/01-path-basics/103-kubernetes-concepts#publish-a-service, if the account has never created an ELB before the AWSServiceRoleForElasticLoadBalancing will not already exist. Publishing the service will fail with

Error creating load balancer (will retry): failed to ensure load balancer for service default/echo-service: AccessDenied: User: arn:aws:sts::<id>:assumed-role/k8s-workshop-EksServiceRo-AWSServiceRoleForAmazonE-1JSU9E31MK5SK/1534356109328432232 is not authorized to perform: iam:CreateServiceLinkedRole on resource: arn:aws:iam::<id>:role/aws-service-role/elasticloadbalancing.amazonaws.com/AWSServiceRoleForElasticLoadBalancing

khuey avatar Aug 15 '18 19:08 khuey