ec2问题上的AWS Spinnaker本地安装:您无权执行此操作

时间:2017-08-15 01:55:10

标签: amazon-ec2 amazon-iam spinnaker

我完成了https://www.spinnaker.io/setup/providers/aws/中提到的配置并启动了spinnaker并在clouddriver.logs中不断收到此错误

Caused by: com.amazonaws.services.ec2.model.AmazonEC2Exception: You are not authorized to perform this operation. (Service: AmazonEC2; Status Code: 403; Error Code: UnauthorizedOperation; Request ID: fb3144e7-7105-44e1-917c-60c6de551d83)

我的安装环境是AWS ec2环境,此实例的角色为BaseIAMRole,并附加了SpinnakerAssumeRolePolicyPowerUserAccess

我在clouddriver.yml中配置了管理帐户和管理帐户,如下所示:

aws:
  enabled: true
  accounts:
  - name: '07xxxx...'
#    requiredGroupMembership: []
    accountId: '07xxxx...'
    regions: []
    assumeRole: role/spinnakerManaged
  - name: '19xxxx...'
  #    requiredGroupMembership: []
    accountId: '19xxxx...'
    regions: []
    assumeRole: role/spinnakerManaged
  primaryAccount: '07xxxx...'
  defaultKeyPairTemplate: '{{name}}-keypair'
  defaultRegions:
  - name: ap-southeast-2
  defaultAssumeRole: role/spinnakerManaged
  defaults:
    iamRole: BaseIAMRole

我拥有管理和管理帐户的管理员权限...

任何帮助都将受到高度赞赏

1 个答案:

答案 0 :(得分:0)

IT似乎您缺少必须附加和设置的AWS IAM策略,以便管理角色和托管角色设置生效。 请参阅以下文档:Armory AWS IAM set up