执行kubectl get ns遇认证错误，求Amazon EKS解决方案

执行kubectl get ns时触发错误：

error: You must be logged in to the server (the server has asked for the client to provide credentials)

已尝试新建IAM策略、角色、集群、用户，甚至使用全新EC2实例排查，均未找到有效解决办法。

相关操作信息 #

执行的kubeconfig更新命令 #

aws eks update-kubeconfig --region eu-north-1 --name OneCluster --role-arn arn:aws:iam::fakenumber:role/OneRole

aws sts get-caller-identity返回结果 #

{
    "UserId": "AIDARAIVMLW6ZZUUK4CLH",
    "Account": "fakenumber",
    "Arn": "arn:aws:iam::fakenumber:user/MainZolo"
}

kubectl config view --minify输出的kubeconfig配置 #

apiVersion: v1
clusters:
- cluster:
    certificate-authority-data: DATA+OMITTED
    server: https://20C9AD9474B6C3D3480652297F89CDCF.gr7.eu-north-1.eks.amazonaws.com
  name: arn:aws:eks:eu-north-1:fakenumber:cluster/OneCluster
contexts:
- context:
    cluster: arn:aws:eks:eu-north-1:fakenumber:cluster/OneCluster
    user: arn:aws:eks:eu-north-1:fakenumber:cluster/OneCluster
  name: arn:aws:eks:eu-north-1:fakenumber:cluster/OneCluster
current-context: arn:aws:eks:eu-north-1:fakenumber:cluster/OneCluster
kind: Config
preferences: {}
users:
- name: arn:aws:eks:eu-north-1:fakenumber:cluster/OneCluster
  user:
    exec:
      apiVersion: client.authentication.k8s.io/v1beta1
      args:
      - token
      - -i
      - OneCluster
      command: aws-iam-authenticator
      env: null
      interactiveMode: IfAvailable
      provideClusterInfo: false

已查阅的资源 #

已查看AWS官方关于EKS API Server未授权错误的排查文档。

CloudWatch日志记录 #

2023-08-07T22:45:48.899+03:00
time="2023-08-07T19:45:44Z" level=info msg="access granted" arn="arn:aws:iam::069301198269:root" client="127.0.0.1:34550" groups="[system:masters]" method=POST path=/authenticate uid="aws-iam-authenticator:069301198269:069301198269" username=kubernetes-admin
Field   Value
@ingestionTime  
1691437549781
@log    
069301198269:/aws/eks/OneCluster/cluster
@logStream  
authenticator-d5c6ff557d720035f94e19838546d748
@message    
time="2023-08-07T19:45:44Z" level=info msg="access granted" arn="arn:aws:iam::069301198269:root" client="127.0.0.1:34550" groups="[system:masters]" method=POST path=/authenticate uid="aws-iam-authenticator:069301198269:069301198269" username=kubernetes-admin
@timestamp  
1691437548899

有没有人遇到过同类问题？

内容的提问来源于stack exchange，提问作者zolo