AWS EKS 负载均衡器服务卡在外部 IP [待定]

Question

我是aws的新手。

我正在尝试将我的应用程序部署到 aws eks，一切都创建得很好，除了我的 caddy 服务器服务，它在尝试获取外部 ip 时停留在挂起状态。

当我描述服务时，这是输出：

Name:                     caddy
Namespace:                default
Labels:                   app=caddy
Annotations:              service.beta.kubernetes.io/aws-load-balancer-nlb-target-type: instance
                          service.beta.kubernetes.io/aws-load-balancer-scheme: internet-facing
                          service.beta.kubernetes.io/aws-load-balancer-type: external
Selector:                 app=caddy
Type:                     LoadBalancer
IP Family Policy:         SingleStack
IP Families:              IPv4
IP:                       10.100.4.149
IPs:                      10.100.4.149
Port:                     http  80/TCP
TargetPort:               80/TCP
NodePort:                 http  31064/TCP
Endpoints:                192.168.26.17:80
Port:                     https  443/TCP
TargetPort:               443/TCP
NodePort:                 https  30707/TCP
Endpoints:                192.168.26.17:443
Session Affinity:         None
External Traffic Policy:  Cluster
Events:
  Type     Reason                Age   From                Message
  ----     ------                ----  ----                -------
  Normal   EnsuringLoadBalancer  16m   service-controller  Ensuring load balancer
  Warning  FailedBuildModel      15m   service             Failed build model due to WebIdentityErr: failed to retrieve credentials
caused by: InvalidIdentityToken: Incorrect token audience
           status code: 400, request id: dd76289e-ca16-48e5-8985-3a4fc1b64f43
  Warning  FailedBuildModel  7m49s  service  Failed build model due to WebIdentityErr: failed to retrieve credentials
caused by: InvalidIdentityToken: Incorrect token audience
  status code: 400, request id: 62ed516f-c505-4bc8-979f-74edc449217e

Answer 1

我发现问题出在我创建的 serviceAccount，OIDC 提供者 URI 中有一个拼写错误。