kops: AWS Gov Coud Unable to list AWS regions

When running kops create cluster in gov cloud I get:

error reading cluster configuration “kube.testing.com”: error reading s3://kubernetes.state.store/kube.testing.com/config: Unable to list AWS regions: AuthFailure: AWS was not able to validate the provided access credentials

I have verified I provided the correct AWS credentials and I can list the s3 buckets using the aws cli with the same credentials. I am running the following command to create the cluster:

kops create cluster --zones=us-gov-west-1a,us-gov-west-1b --admin-access="x.x.x.x/24" --cloud=aws --image=ami-xxxxxxxx --master-zones=us-gov-west-1a,us-gov-west-1b --node-count=4 --vpc=vpc-xxxxxxxx --state=s3://kubernetes.state.store --network-cidr="y.y.y.y/24" --name=kube.testing.com -v 5 --logtostderr

From what I can gather it doesn’t look like kops is able to validate us-gov-west-1 as a valid region.

Unfortunately I’m really new to kubernetes, kops, and aws so hopefully I’m not doing something stupid.

About this issue

Original URL
State: closed
Created 7 years ago
Comments: 16 (3 by maintainers)

Commits related to this issue

aws configure bug still a problem. Have reported on https://github.com/kubernetes/kops/issues/2034 — committed to samturton2/Kubernetes_deployment by samturton2 3 years ago

Most upvoted comments

setting export AWS_REGION="us-gov-west-1" before doing the kops create cluster worked for me, but then when applying via kops update cluster [...] --yes, kops wasn’t able to complete:

I0702 16:01:17.383569   40128 executor.go:91] Tasks: 54 done / 77 total; 19 can run
W0702 16:01:19.302566   40128 executor.go:118] error running task "LaunchConfiguration/master-us-gov-west-1a.masters.test-foo-tech.k8s.local" (9m58s remaining to succeed): could not find Image for "kope.io/k8s-1.9-debian-jessie-amd64-hvm-ebs-2018-03-11"
W0702 16:01:19.302639   40128 executor.go:118] error running task "LaunchConfiguration/nodes.test-foo-tech.k8s.local" (9m58s remaining to succeed): could not find Image for "kope.io/k8s-1.9-debian-jessie-amd64-hvm-ebs-2018-03-11"
I0702 16:01:19.302680   40128 executor.go:91] Tasks: 71 done / 77 total; 3 can run

weisjohn on Jul 2, 2018