helm jenkins的备份工作无故失败

Question

我使用的是官方的 helm Jenkins的图表。

我已经启用了备份，并提供了备份凭证。

以下是相关配置 values.yaml

## Backup cronjob configuration
## Ref: https://github.com/maorfr/kube-tasks
backup:
  # Backup must use RBAC
  # So by enabling backup you are enabling RBAC specific for backup
  enabled: true
  # Used for label app.kubernetes.io/component
  componentName: "jenkins-backup"
  # Schedule to run jobs. Must be in cron time format
  # Ref: https://crontab.guru/
  schedule: "0 2 * * *"
  labels: {}
  annotations: {}
    # Example for authorization to AWS S3 using kube2iam
    # Can also be done using environment variables
    # iam.amazonaws.com/role: "jenkins"
  image:
    repository: "maorfr/kube-tasks"
    tag: "0.2.0"
  # Additional arguments for kube-tasks
  # Ref: https://github.com/maorfr/kube-tasks#simple-backup
  extraArgs: []
  # Add existingSecret for AWS credentials
  existingSecret: {}
    # gcpcredentials: "credentials.json"
  ## Example for using an existing secret
   # jenkinsaws:
  ## Use this key for AWS access key ID
  awsaccesskey: "AAAAJJJJDDDDDDJJJJJ"
  ## Use this key for AWS secret access key
  awssecretkey: "frkmfrkmrlkmfrkmflkmlm"
  # Add additional environment variables
   # jenkinsgcp:
  ## Use this key for GCP credentials
  env: []
  # Example environment variable required for AWS credentials chain
  # - name: "AWS_REGION"
  #   value: "us-east-1"
  resources:
    requests:
      memory: 1Gi
      cpu: 1
    limits:
      memory: 1Gi
      cpu: 1
  # Destination to store the backup artifacts
  # Supported cloud storage services: AWS S3, Minio S3, Azure Blob Storage, Google Cloud Storage
  # Additional support can added. Visit this repository for details
  # Ref: https://github.com/maorfr/skbn
  destination: "s3://jenkins-data/backup"

但是，备份工作失败的情况如下。

2020/01/22 20:19:23 Backup started!
2020/01/22 20:19:23 Getting clients
2020/01/22 20:19:26 NoCredentialProviders: no valid providers in chain. Deprecated.
    For verbose messaging see aws.Config.CredentialsChainVerboseErrors

少了什么？

Answer 1

你必须创建秘密，它看起来像这样。

kubectl create secret generic jenkinsaws --from-literal=jenkins_aws_access_key=ACCESS_KEY --from-literal=jenkins_aws_secret_key=SECRET_KEY。

然后这样消费。

existingSecret:

jenkinsaws: 
  awsaccesskey: jenkins_aws_access_key
  awssecretkey: jenkins_aws_secret_key

其中jenkins_aws_access_keyjenkins_aws_secret_key是秘密的密钥。