Issue with Pending PVC due to EBS CSI Driver Provisioning

Cloud AWS
, ,
#1

Dear [Team/Support],
I have installed EKS using terraform as kodekloud github docs. and I have created a StorageClass using the EBS provisioner and subsequently created a PersistentVolumeClaim (PVC) that utilizes this StorageClass. However, the PVC is stuck in the “Pending” state with the following error message:

persistentvolume-controller: Waiting for a volume to be created either by the external provisioner 'ebs.csi.aws.com' or manually by the system administrator. If volume creation is delayed, please verify that the provisioner is running and correctly registered.

It appears that the dynamic provisioning of the EBS volume is not occurring as expected. Could you please guide me on how to properly set up and configure the Amazon EBS CSI driver to resolve this issue?

with EBS CSI driver helm install getting below error in pvc

failed to provision volume with StorageClass "ebs-sc1": rpc error: code = Internal desc = Could not create volume "pvc-348863d54eab": could not create volume in EC2: operation error EC2: CreateVolume, https response error StatusCode: 403, RequestID: 4526a-403f-bd93-a82a87f30afe, api error UnauthorizedOperation: You are not authorized to perform this operation. User: arn:aws:sts::3901s212119339:assumed-role/eks-demo-node/i-sadsa is not authorized to perform: ec2:CreateVolume on resource: arn:aws:ec2:us-east-1:3901s212119339:volume/* because no identity-based policy allows the ec2:CreateVolume action. Encoded authorization failure message:

Thank you for your assistance.

#2

Hi RutujaBhosale,

Please refer to the document below and follow the instructions. Let me know if you have any questions.
The Amazon EBS CSI plugin requires IAM permissions to make calls to AWS APIs on your behalf. If you don’t do these steps, attempting to install the add-on and running kubectl describe pvc will show failed to provision volume with StorageClass along with a could not create volume in EC2: UnauthorizedOperation error.

#3

Furthermore, if you are trying to do this in Playground, you are unlikely to be able to grant permissions as IAM is restricted here.

#4

@Alistair_KodeKloud yes, I am trying this in kodekloud AWS playground, is there in any other way to create PVC? I want to deploy mysql based application on eks aws

#5

You will have to provision them manually as hostpath, as taught in the CKA course.

Bear in mind that the playground accounts are not persistent, and are deleted at the end of the lab session, so anything you deploy will be lost.

#6

Thank you for your assistance. I will need to create a Persistent Volume (PV). Unfortunately, I won’t be able to utilize a StorageClass.

#7

i 've added policymanualy and attach to “eks-demo-node” role.

{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": [
"ec2:AttachVolume",
"ec2:CreateVolume",
"ec2:DescribeVolumes",
"ec2:DeleteVolume",
"ec2:ModifyVolume",
"ec2:DetachVolume",
"ec2:DescribeAvailabilityZones",
"ec2:CreateTags",
"ec2:DescribeVolumeStatus"
],
"Resource": "*"
}
]
}
#8

Did that work for you @bngr ?

#9

yes. it helped for me.

i used:

helm install ebs-csi-driver ebs-csi-driver/aws-ebs-csi-driver --namespace kube-system --create-namespace

storage class = gp2