Troubleshooting issues in ADOT Amazon EKS add-on - Amazon EKS
Error: eks:addon-manager can't patch resource in API groupError: CREATE_FAILED or UPDATE_FAILEDError: DELETE_FAILED
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Troubleshooting issues in ADOT Amazon EKS add-on

This topic covers some of the common errors that you might encounter while using the Amazon Distro for OpenTelemetry (ADOT) Amazon EKS add-on. The topic also includes instructions on how to resolve or workaround the common errors.

Error: "code": "AccessDenied", "message": "roles.rbac.authorization.k8s.io \"opentelemetry-operator-leader-election-role\" is forbidden: User \"eks:addon-manager\" cannot patch resource \"roles\" in API group \"rbac.authorization.k8s.io\" in the namespace \"opentelemetry-operator-system\"

You don't have permission to install the ADOT for Amazon EKS add-on. See Install the Amazon Distro for OpenTelemetry (ADOT) Operator. If you have deleted the add-on and are now reinstalling, make sure that you have applied the required permissions.

Error: "status": "CREATE_FAILED" or "status": "UPDATE_FAILED"

This can happen due to the following reasons:

  • There might be a conflict. You can overwrite conflicts by adding the --resolve-conflicts=OVERWRITE flag and running the create command again.

  • If you're using an add-on version earlier than v0.51.0, you may be on an unsupported architecture, such as arm64. Consult your logs to determine if this is the case. If so, updating your add-on version may resolve this issue because v0.51.0 and later are multi-arch.

Delete add-on error: "status": "DELETE_FAILED"

You can remove Amazon EKS management of the ADOT Operator add-on by adding the --preserve flag to your aws eks delete-addon command.