aws_eks_cluster.this: error creating EKS Cluster (test-eks-lWuwSgqK): InvalidParameterException: Error in...












0














I have issues
with deploying a test environment from the example provided in this community terraform-aws-eks module.



Cluster creation fails because of invalid role parameters.



...
module.eks.aws_eks_cluster.this: Creating...
arn: "" => "<computed>"
certificate_authority.#: "" => "<computed>"
created_at: "" => "<computed>"
endpoint: "" => "<computed>"
name: "" => "test-eks-lWuwSgqK"
platform_version: "" => "<computed>"
role_arn: "" => "arn:aws:iam::388030365049:role/test-eks-lWuwSgqK20181120125058962600000001"
version: "" => "1.10"
vpc_config.#: "" => "1"
vpc_config.0.security_group_ids.#: "" => "1"
vpc_config.0.security_group_ids.3345499915: "" => "sg-0440b523195e2b0ab"
vpc_config.0.subnet_ids.#: "" => "3"
vpc_config.0.subnet_ids.1248930552: "" => "subnet-0726008335a5d88d5"
vpc_config.0.subnet_ids.2473547375: "" => "subnet-0fc6f4d85a453dbd5"
vpc_config.0.subnet_ids.3955092080: "" => "subnet-08c3c49b6442780ec"
vpc_config.0.vpc_id: "" => "<computed>"
....
Error: Error applying plan:

1 error(s) occurred:

* module.eks.aws_eks_cluster.this: 1 error(s) occurred:

* aws_eks_cluster.this: error creating EKS Cluster (test-eks-lWuwSgqK): InvalidParameterException: Error in role params
status code: 400, request id: f57ed2d0-ecc2-11e8-9fa6-b5608af2307c


Using the eks_test_fixture:
https://github.com/terraform-aws-modules/terraform-aws-eks/tree/master/examples/eks_test_fixture



Environment details



Affected module version: 1.7.0.



OS: MacOS Mojave 10.14.1



Terraform version: 0.11.10



Thanks in advance!










share|improve this question






















  • What AWS provider version are you using?
    – ydaetskcoR
    Nov 20 '18 at 13:44










  • Terraform v0.11.10 + provider.aws v1.46.0 + provider.local v1.1.0 + provider.null v1.0.0 + provider.random v1.3.1 + provider.template v1.0.0
    – syst0m
    Nov 20 '18 at 13:45












  • Can you paste the exact code of your module here?
    – Ram
    Nov 21 '18 at 5:45
















0














I have issues
with deploying a test environment from the example provided in this community terraform-aws-eks module.



Cluster creation fails because of invalid role parameters.



...
module.eks.aws_eks_cluster.this: Creating...
arn: "" => "<computed>"
certificate_authority.#: "" => "<computed>"
created_at: "" => "<computed>"
endpoint: "" => "<computed>"
name: "" => "test-eks-lWuwSgqK"
platform_version: "" => "<computed>"
role_arn: "" => "arn:aws:iam::388030365049:role/test-eks-lWuwSgqK20181120125058962600000001"
version: "" => "1.10"
vpc_config.#: "" => "1"
vpc_config.0.security_group_ids.#: "" => "1"
vpc_config.0.security_group_ids.3345499915: "" => "sg-0440b523195e2b0ab"
vpc_config.0.subnet_ids.#: "" => "3"
vpc_config.0.subnet_ids.1248930552: "" => "subnet-0726008335a5d88d5"
vpc_config.0.subnet_ids.2473547375: "" => "subnet-0fc6f4d85a453dbd5"
vpc_config.0.subnet_ids.3955092080: "" => "subnet-08c3c49b6442780ec"
vpc_config.0.vpc_id: "" => "<computed>"
....
Error: Error applying plan:

1 error(s) occurred:

* module.eks.aws_eks_cluster.this: 1 error(s) occurred:

* aws_eks_cluster.this: error creating EKS Cluster (test-eks-lWuwSgqK): InvalidParameterException: Error in role params
status code: 400, request id: f57ed2d0-ecc2-11e8-9fa6-b5608af2307c


Using the eks_test_fixture:
https://github.com/terraform-aws-modules/terraform-aws-eks/tree/master/examples/eks_test_fixture



Environment details



Affected module version: 1.7.0.



OS: MacOS Mojave 10.14.1



Terraform version: 0.11.10



Thanks in advance!










share|improve this question






















  • What AWS provider version are you using?
    – ydaetskcoR
    Nov 20 '18 at 13:44










  • Terraform v0.11.10 + provider.aws v1.46.0 + provider.local v1.1.0 + provider.null v1.0.0 + provider.random v1.3.1 + provider.template v1.0.0
    – syst0m
    Nov 20 '18 at 13:45












  • Can you paste the exact code of your module here?
    – Ram
    Nov 21 '18 at 5:45














0












0








0







I have issues
with deploying a test environment from the example provided in this community terraform-aws-eks module.



Cluster creation fails because of invalid role parameters.



...
module.eks.aws_eks_cluster.this: Creating...
arn: "" => "<computed>"
certificate_authority.#: "" => "<computed>"
created_at: "" => "<computed>"
endpoint: "" => "<computed>"
name: "" => "test-eks-lWuwSgqK"
platform_version: "" => "<computed>"
role_arn: "" => "arn:aws:iam::388030365049:role/test-eks-lWuwSgqK20181120125058962600000001"
version: "" => "1.10"
vpc_config.#: "" => "1"
vpc_config.0.security_group_ids.#: "" => "1"
vpc_config.0.security_group_ids.3345499915: "" => "sg-0440b523195e2b0ab"
vpc_config.0.subnet_ids.#: "" => "3"
vpc_config.0.subnet_ids.1248930552: "" => "subnet-0726008335a5d88d5"
vpc_config.0.subnet_ids.2473547375: "" => "subnet-0fc6f4d85a453dbd5"
vpc_config.0.subnet_ids.3955092080: "" => "subnet-08c3c49b6442780ec"
vpc_config.0.vpc_id: "" => "<computed>"
....
Error: Error applying plan:

1 error(s) occurred:

* module.eks.aws_eks_cluster.this: 1 error(s) occurred:

* aws_eks_cluster.this: error creating EKS Cluster (test-eks-lWuwSgqK): InvalidParameterException: Error in role params
status code: 400, request id: f57ed2d0-ecc2-11e8-9fa6-b5608af2307c


Using the eks_test_fixture:
https://github.com/terraform-aws-modules/terraform-aws-eks/tree/master/examples/eks_test_fixture



Environment details



Affected module version: 1.7.0.



OS: MacOS Mojave 10.14.1



Terraform version: 0.11.10



Thanks in advance!










share|improve this question













I have issues
with deploying a test environment from the example provided in this community terraform-aws-eks module.



Cluster creation fails because of invalid role parameters.



...
module.eks.aws_eks_cluster.this: Creating...
arn: "" => "<computed>"
certificate_authority.#: "" => "<computed>"
created_at: "" => "<computed>"
endpoint: "" => "<computed>"
name: "" => "test-eks-lWuwSgqK"
platform_version: "" => "<computed>"
role_arn: "" => "arn:aws:iam::388030365049:role/test-eks-lWuwSgqK20181120125058962600000001"
version: "" => "1.10"
vpc_config.#: "" => "1"
vpc_config.0.security_group_ids.#: "" => "1"
vpc_config.0.security_group_ids.3345499915: "" => "sg-0440b523195e2b0ab"
vpc_config.0.subnet_ids.#: "" => "3"
vpc_config.0.subnet_ids.1248930552: "" => "subnet-0726008335a5d88d5"
vpc_config.0.subnet_ids.2473547375: "" => "subnet-0fc6f4d85a453dbd5"
vpc_config.0.subnet_ids.3955092080: "" => "subnet-08c3c49b6442780ec"
vpc_config.0.vpc_id: "" => "<computed>"
....
Error: Error applying plan:

1 error(s) occurred:

* module.eks.aws_eks_cluster.this: 1 error(s) occurred:

* aws_eks_cluster.this: error creating EKS Cluster (test-eks-lWuwSgqK): InvalidParameterException: Error in role params
status code: 400, request id: f57ed2d0-ecc2-11e8-9fa6-b5608af2307c


Using the eks_test_fixture:
https://github.com/terraform-aws-modules/terraform-aws-eks/tree/master/examples/eks_test_fixture



Environment details



Affected module version: 1.7.0.



OS: MacOS Mojave 10.14.1



Terraform version: 0.11.10



Thanks in advance!







terraform terraform-provider-aws amazon-eks aws-eks






share|improve this question













share|improve this question











share|improve this question




share|improve this question










asked Nov 20 '18 at 13:31









syst0msyst0m

315




315












  • What AWS provider version are you using?
    – ydaetskcoR
    Nov 20 '18 at 13:44










  • Terraform v0.11.10 + provider.aws v1.46.0 + provider.local v1.1.0 + provider.null v1.0.0 + provider.random v1.3.1 + provider.template v1.0.0
    – syst0m
    Nov 20 '18 at 13:45












  • Can you paste the exact code of your module here?
    – Ram
    Nov 21 '18 at 5:45


















  • What AWS provider version are you using?
    – ydaetskcoR
    Nov 20 '18 at 13:44










  • Terraform v0.11.10 + provider.aws v1.46.0 + provider.local v1.1.0 + provider.null v1.0.0 + provider.random v1.3.1 + provider.template v1.0.0
    – syst0m
    Nov 20 '18 at 13:45












  • Can you paste the exact code of your module here?
    – Ram
    Nov 21 '18 at 5:45
















What AWS provider version are you using?
– ydaetskcoR
Nov 20 '18 at 13:44




What AWS provider version are you using?
– ydaetskcoR
Nov 20 '18 at 13:44












Terraform v0.11.10 + provider.aws v1.46.0 + provider.local v1.1.0 + provider.null v1.0.0 + provider.random v1.3.1 + provider.template v1.0.0
– syst0m
Nov 20 '18 at 13:45






Terraform v0.11.10 + provider.aws v1.46.0 + provider.local v1.1.0 + provider.null v1.0.0 + provider.random v1.3.1 + provider.template v1.0.0
– syst0m
Nov 20 '18 at 13:45














Can you paste the exact code of your module here?
– Ram
Nov 21 '18 at 5:45




Can you paste the exact code of your module here?
– Ram
Nov 21 '18 at 5:45












1 Answer
1






active

oldest

votes


















0














I had to reconfigure the IAM roles, user and policy.



Example:



module "xxxxx" {
source = "git@github.com:terraform-aws-modules/terraform-aws-eks.git?ref=v1.7.0"
cluster_name = "xxxx-xxxx"
subnets = ["${module.vpc1.private_subnets}"]
vpc_id = "${module.vpc1.vpc_id}"
map_roles = "${local.eks_map_roles}"
...
}

locals {
eks_map_roles = [
{
role_arn = "arn:aws:iam::${data.aws_caller_identity.current.account_id}:role/xxxxx"
username = "admin:{{SessionName}}"
group = "system:masters"
},
{
role_arn = "arn:aws:iam::${data.aws_caller_identity.current.account_id}:role/xxxxxxx"
username = "admin:{{SessionName}}"
group = "system:masters"
},
]
}





share|improve this answer





















    Your Answer






    StackExchange.ifUsing("editor", function () {
    StackExchange.using("externalEditor", function () {
    StackExchange.using("snippets", function () {
    StackExchange.snippets.init();
    });
    });
    }, "code-snippets");

    StackExchange.ready(function() {
    var channelOptions = {
    tags: "".split(" "),
    id: "1"
    };
    initTagRenderer("".split(" "), "".split(" "), channelOptions);

    StackExchange.using("externalEditor", function() {
    // Have to fire editor after snippets, if snippets enabled
    if (StackExchange.settings.snippets.snippetsEnabled) {
    StackExchange.using("snippets", function() {
    createEditor();
    });
    }
    else {
    createEditor();
    }
    });

    function createEditor() {
    StackExchange.prepareEditor({
    heartbeatType: 'answer',
    autoActivateHeartbeat: false,
    convertImagesToLinks: true,
    noModals: true,
    showLowRepImageUploadWarning: true,
    reputationToPostImages: 10,
    bindNavPrevention: true,
    postfix: "",
    imageUploader: {
    brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
    contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
    allowUrls: true
    },
    onDemand: true,
    discardSelector: ".discard-answer"
    ,immediatelyShowMarkdownHelp:true
    });


    }
    });














    draft saved

    draft discarded


















    StackExchange.ready(
    function () {
    StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53394129%2faws-eks-cluster-this-error-creating-eks-cluster-test-eks-lwuwsgqk-invalidpar%23new-answer', 'question_page');
    }
    );

    Post as a guest















    Required, but never shown

























    1 Answer
    1






    active

    oldest

    votes








    1 Answer
    1






    active

    oldest

    votes









    active

    oldest

    votes






    active

    oldest

    votes









    0














    I had to reconfigure the IAM roles, user and policy.



    Example:



    module "xxxxx" {
    source = "git@github.com:terraform-aws-modules/terraform-aws-eks.git?ref=v1.7.0"
    cluster_name = "xxxx-xxxx"
    subnets = ["${module.vpc1.private_subnets}"]
    vpc_id = "${module.vpc1.vpc_id}"
    map_roles = "${local.eks_map_roles}"
    ...
    }

    locals {
    eks_map_roles = [
    {
    role_arn = "arn:aws:iam::${data.aws_caller_identity.current.account_id}:role/xxxxx"
    username = "admin:{{SessionName}}"
    group = "system:masters"
    },
    {
    role_arn = "arn:aws:iam::${data.aws_caller_identity.current.account_id}:role/xxxxxxx"
    username = "admin:{{SessionName}}"
    group = "system:masters"
    },
    ]
    }





    share|improve this answer


























      0














      I had to reconfigure the IAM roles, user and policy.



      Example:



      module "xxxxx" {
      source = "git@github.com:terraform-aws-modules/terraform-aws-eks.git?ref=v1.7.0"
      cluster_name = "xxxx-xxxx"
      subnets = ["${module.vpc1.private_subnets}"]
      vpc_id = "${module.vpc1.vpc_id}"
      map_roles = "${local.eks_map_roles}"
      ...
      }

      locals {
      eks_map_roles = [
      {
      role_arn = "arn:aws:iam::${data.aws_caller_identity.current.account_id}:role/xxxxx"
      username = "admin:{{SessionName}}"
      group = "system:masters"
      },
      {
      role_arn = "arn:aws:iam::${data.aws_caller_identity.current.account_id}:role/xxxxxxx"
      username = "admin:{{SessionName}}"
      group = "system:masters"
      },
      ]
      }





      share|improve this answer
























        0












        0








        0






        I had to reconfigure the IAM roles, user and policy.



        Example:



        module "xxxxx" {
        source = "git@github.com:terraform-aws-modules/terraform-aws-eks.git?ref=v1.7.0"
        cluster_name = "xxxx-xxxx"
        subnets = ["${module.vpc1.private_subnets}"]
        vpc_id = "${module.vpc1.vpc_id}"
        map_roles = "${local.eks_map_roles}"
        ...
        }

        locals {
        eks_map_roles = [
        {
        role_arn = "arn:aws:iam::${data.aws_caller_identity.current.account_id}:role/xxxxx"
        username = "admin:{{SessionName}}"
        group = "system:masters"
        },
        {
        role_arn = "arn:aws:iam::${data.aws_caller_identity.current.account_id}:role/xxxxxxx"
        username = "admin:{{SessionName}}"
        group = "system:masters"
        },
        ]
        }





        share|improve this answer












        I had to reconfigure the IAM roles, user and policy.



        Example:



        module "xxxxx" {
        source = "git@github.com:terraform-aws-modules/terraform-aws-eks.git?ref=v1.7.0"
        cluster_name = "xxxx-xxxx"
        subnets = ["${module.vpc1.private_subnets}"]
        vpc_id = "${module.vpc1.vpc_id}"
        map_roles = "${local.eks_map_roles}"
        ...
        }

        locals {
        eks_map_roles = [
        {
        role_arn = "arn:aws:iam::${data.aws_caller_identity.current.account_id}:role/xxxxx"
        username = "admin:{{SessionName}}"
        group = "system:masters"
        },
        {
        role_arn = "arn:aws:iam::${data.aws_caller_identity.current.account_id}:role/xxxxxxx"
        username = "admin:{{SessionName}}"
        group = "system:masters"
        },
        ]
        }






        share|improve this answer












        share|improve this answer



        share|improve this answer










        answered Nov 21 '18 at 17:27









        syst0msyst0m

        315




        315






























            draft saved

            draft discarded




















































            Thanks for contributing an answer to Stack Overflow!


            • Please be sure to answer the question. Provide details and share your research!

            But avoid



            • Asking for help, clarification, or responding to other answers.

            • Making statements based on opinion; back them up with references or personal experience.


            To learn more, see our tips on writing great answers.





            Some of your past answers have not been well-received, and you're in danger of being blocked from answering.


            Please pay close attention to the following guidance:


            • Please be sure to answer the question. Provide details and share your research!

            But avoid



            • Asking for help, clarification, or responding to other answers.

            • Making statements based on opinion; back them up with references or personal experience.


            To learn more, see our tips on writing great answers.




            draft saved


            draft discarded














            StackExchange.ready(
            function () {
            StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53394129%2faws-eks-cluster-this-error-creating-eks-cluster-test-eks-lwuwsgqk-invalidpar%23new-answer', 'question_page');
            }
            );

            Post as a guest















            Required, but never shown





















































            Required, but never shown














            Required, but never shown












            Required, but never shown







            Required, but never shown

































            Required, but never shown














            Required, but never shown












            Required, but never shown







            Required, but never shown







            Popular posts from this blog

            "Incorrect syntax near the keyword 'ON'. (on update cascade, on delete cascade,)

            Alcedinidae

            RAC Tourist Trophy