-
Bug
-
Resolution: Can't Do
-
Undefined
-
None
-
None
-
None
-
True
-
-
False
-
If Release Note Needed, Set a Value
-
Set a Value
Here is list of ocm-roles. Note 'OCM-UI-ADMIN-OCM-Role' is currently linked:
uhc-portal>rosa list ocm-roles I: Fetching ocm roles ROLE NAME ROLE ARN LINKED ADMIN OCM-UI-ADMIN-OCM-Role-15212158 arn:aws:iam::269733383066:role/OCM-UI-ADMIN-OCM-Role-15212158 Yes Yes OCM-UI-BASIC-OCM-Role-15212158 arn:aws:iam::269733383066:role/OCM-UI-BASIC-OCM-Role-15212158 No No pneedle-arn-path-test-ocm-OCM-Role-15234082 arn:aws:iam::269733383066:role/test/path/pneedle3/pneedle-arn-path-test-ocm-OCM-Role-15234082 No Yes
In the UI, I am able to select 'pneedle' account-role ARNs and proceed to [Create Cluster] but get:
The UI calls this API passing in AWS account id, I don't see how to filter these results to only show ARNs of the currently linked ocm-role? In the example below, we'd only want to use items with `"prefix": "ManagedOpenShift",`:
uhc-portal>ocm post /api/clusters_mgmt/v1/aws_inquiries/sts_account_roles <<EOM { "account_id":"269733383066" } EOM { "kind": "AccountRolesList", "aws_acccount_id": "269733383066", "items": [ { "prefix": "ManagedOpenShift", "kind": "AccountRoles", "items": [ { "arn": "arn:aws:iam::269733383066:role/ManagedOpenShift-ControlPlane-Role", "type": "ControlPlane", "isAdmin": false, "roleVersion": "4.10" }, { "arn": "arn:aws:iam::269733383066:role/ManagedOpenShift-Installer-Role", "type": "Installer", "isAdmin": false, "roleVersion": "4.10" }, { "arn": "arn:aws:iam::269733383066:role/ManagedOpenShift-Support-Role", "type": "Support", "isAdmin": false, "roleVersion": "4.10" }, { "arn": "arn:aws:iam::269733383066:role/ManagedOpenShift-Worker-Role", "type": "Worker", "isAdmin": false, "roleVersion": "4.10" } ] }, { "prefix": "pneedle-arn-path-test-1", "kind": "AccountRoles", "items": [ { "arn": "arn:aws:iam::269733383066:role/test/path/pneedle/pneedle-arn-path-test-1-ControlPlane-Role", "type": "ControlPlane", "isAdmin": false, "roleVersion": "4.11" }, { "arn": "arn:aws:iam::269733383066:role/test/path/pneedle/pneedle-arn-path-test-1-Installer-Role", "type": "Installer", "isAdmin": false, "roleVersion": "4.11" }, { "arn": "arn:aws:iam::269733383066:role/test/path/pneedle/pneedle-arn-path-test-1-Support-Role", "type": "Support", "isAdmin": false, "roleVersion": "4.11" }, { "arn": "arn:aws:iam::269733383066:role/test/path/pneedle/pneedle-arn-path-test-1-Worker-Role", "type": "Worker", "isAdmin": false, "roleVersion": "4.11" } ] }, { "prefix": "pneedle-arn-path-test-2", "kind": "AccountRoles", "items": [ { "arn": "arn:aws:iam::269733383066:role/test/path/pneedle2/pneedle-arn-path-test-2-ControlPlane-Role", "type": "ControlPlane", "isAdmin": false, "roleVersion": "4.11" }, { "arn": "arn:aws:iam::269733383066:role/test/path/pneedle2/pneedle-arn-path-test-2-Installer-Role", "type": "Installer", "isAdmin": false, "roleVersion": "4.11" }, { "arn": "arn:aws:iam::269733383066:role/test/path/pneedle2/pneedle-arn-path-test-2-Support-Role", "type": "Support", "isAdmin": false, "roleVersion": "4.11" }, { "arn": "arn:aws:iam::269733383066:role/test/path/pneedle2/pneedle-arn-path-test-2-Worker-Role", "type": "Worker", "isAdmin": false, "roleVersion": "4.11" } ] } ] }
- is related to
-
HAC-1642 ROSA Wizard: Error creating cluster for mismatched ARNs should be raised immediately
- Closed