尝试将已运行的AKS群集附加为计算目标时出现权限错误 [英] Permission Error when trying to Attach already running AKS cluster as compute target

问题描述

我们正在尝试将我们的AKS集群附加到ML服务以用作计算目标.我已按照所有说明进行操作，但是遇到权限错误的提示.

We are trying to attach our AKS cluster to the ML service to serve as a compute target. I've followed all the instructions but I have hit a snag with permissions error. 

在部署图像提取秘密时重试次数少于< our ml容器注册表名称> acrkey，发生以下异常:操作返回了无效的 状态码禁止"，操作返回无效的状态码禁止"，操作返回无效的状态码禁止"，操作返回无效的状态码禁止"，操作返回无效的状态码禁止"

Retries exceeded in deploying image pull secret <our ml container registry name>acrkey, exceptions occured are: Operation returned an invalid status code 'Forbidden',Operation returned an invalid status code 'Forbidden',Operation returned an invalid status code 'Forbidden',Operation returned an invalid status code 'Forbidden',Operation returned an invalid status code 'Forbidden'

我已经为ML ACR的群集授予了贡献者"的服务角色，并使用kubectl将其抱怨的密钥设置为正确的用户/密码组合，但问题仍然存在.有人有想法吗?

I've granted the service principle role of 'Contributor' to the cluster for the ML ACR as well as set the key that its complaining about to the correct user/pass combo with kubectl but the issue remains. Any one have any ideas?

推荐答案

嗨Alverez1981，

请确认ACR名称没有大写字符.如果它具有大写字母，则不能将其作为AKS添加到AML工作区中.

这里也报告了类似的问题:

https://social.technet.microsoft.com/Forums/zh-CN/4b04057e-856f-4f92-a7d8-38efb4949a85/cant-add-aks-in-a-workspace-deployed-with-an-arm-template吗? forum = AzureMachineLearningService

希望这会有所帮助.

Hi Alverez1981,

Please verify that the ACR name doesn't have uppercase characters. If it has an uppercase then it can't be added as an AKS in the AML workspace. 

There's a similar issue reported here : 

https://social.technet.microsoft.com/Forums/en-US/4b04057e-856f-4f92-a7d8-38efb4949a85/cant-add-aks-in-a-workspace-deployed-with-an-arm-template?forum=AzureMachineLearningService

Hope this helps.

这篇关于尝试将已运行的AKS群集附加为计算目标时出现权限错误的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！