Kubectl 在 EKS 上创建后无法连接到服务器

Question

我正在按照 AWS 指南在 EKS 上设置集群，here。我一直走到第 4 步。但是，在尝试时：

kubectl get svc

我收到以下错误消息：

无法连接到服务器：dial tcp [IP:Port]: i/o timeout

我认为这与我的 kubeconfig 不正确有关。我的配置如下所示：

apiVersion: v1
clusters:
- cluster:
    certificate-authority-data: DATA+OMITTED
    server: [SERVER_URL]
  name: arn:aws:eks:ap-southeast-1:[ACCT_ID]:cluster/[CLUSTER_NAME]
contexts:
- context:
    cluster: arn:aws:eks:ap-southeast-1:[ACCT_ID]:cluster/[CLUSTER_NAME]
    user: arn:aws:eks:ap-southeast-1:[ACCT_ID]:cluster/[CLUSTER_NAME]
  name: arn:aws:eks:ap-southeast-1:[ACCT_ID]:cluster/[CLUSTER_NAME]
current-context: arn:aws:eks:ap-southeast-1:[ACCT_ID]:cluster/[CLUSTER_NAME]
kind: Config
preferences: {}
users:
- name: arn:aws:eks:ap-southeast-1:[ACCT_ID]:cluster/[CLUSTER_NAME]
  user:
    exec:
      apiVersion: client.authentication.k8s.io/v1beta1
      args:
      - --region
      - ap-southeast-1
      - eks
      - get-token
      - --cluster-name
      - [CLUSTER_NAME]
      command: aws
      env:
      - name: AWS_PROFILE
        value: default
      interactiveMode: IfAvailable
      provideClusterInfo: false

我认为这可能与我的强制 MFA 政策有关，所以我删除了它。另外，当我尝试做aws eks describe-cluster --name [CLUSTER_NAME] --profile default时，我得到了这个结果：

{
    "cluster": {
        "name": "[CLUSTER_NAME]",
        "arn": "arn:aws:eks:ap-southeast-1:[ACCT_ID]:cluster/quantum-dev",
        "createdAt": "2023-01-12T14:43:44.672000+09:00",
        "version": "1.24",
        "endpoint": "https://[CLUSTER_ID].gr7.ap-southeast-1.eks.amazonaws.com",
        "roleArn": "arn:aws:iam::[ACCT_ID]:role/[CLUSTER_NAME]-cluster-role",
        "resourcesVpcConfig": {
            "subnetIds": [
                "subnet-0d6f0f95e19b421ab",
                "subnet-0dfaf09d4f3f1bf71",
                "subnet-0b59c6e7719981e06"
            ],
            "securityGroupIds": [
                "sg-01bc18956704de609"
            ],
            "clusterSecurityGroupId": "sg-09a22a6ea091c7a4d",
            "vpcId": "vpc-0e1db1e6fb8d7711c",
            "endpointPublicAccess": false,
            "endpointPrivateAccess": true,
            "publicAccessCidrs": []
        },
        "kubernetesNetworkConfig": {
            "serviceIpv4Cidr": "10.100.0.0/16",
            "ipFamily": "ipv4"
        },
        "logging": {
            "clusterLogging": [
                {
                    "types": [
                        "api"
                    ],
                    "enabled": true
                },
                {
                    "types": [
                        "audit",
                        "authenticator",
                        "controllerManager",
                        "scheduler"
                    ],
                    "enabled": false
                }
            ]
        },
        "identity": {
            "oidc": {
                "issuer": "https://oidc.eks.ap-southeast-1.amazonaws.com/id/[CLUSTER_ID]"
            }
        },
        "status": "ACTIVE",
        "certificateAuthority": {
            "data": "[CERTIFICATE]"
        },
        "platformVersion": "eks.3",
        "tags": {
            "Environment": "dev"
        },
        "encryptionConfig": [
            {
                "resources": [
                    "secrets"
                ],
                "provider": {
                    "keyArn": "arn:aws:kms:ap-southeast-1:[ACCT_ID]:key/[KMS_KEY_ID]"
                }
            }
        ]
    }
}

这告诉我我有 eks:DescribeCluster 权限。有谁知道我做错了什么以及如何解决这个问题？

Answer 1

生成 aws eks kubeconfig 文件

https://aws.amazon.com/premiumsupport/knowledge-center/eks-generate-kubeconfig-file-for-cluster/?nc1=h_ls