Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-23793

Incomplete command provided for adding role to service principle

    • Quality / Stability / Reliability
    • False
    • Hide

      None

      Show
      None
    • None
    • None
    • No
    • None
    • None
    • None
    • None
    • None
    • Release Note Not Required
    • N/A
    • None
    • None
    • None
    • None

      Description of problem:

      While configuring service principle for azure IPI installation. The documentation provides incomplete command for adding "contributor" role to Service Principle.
      
      [1] https://docs.openshift.com/container-platform/4.14/installing/installing_azure/installing-azure-account.html#:~:text=If%20you%20applied%20the%20Contributor%20role
      
      The command gives the following output.
      
      $ az role assignment create --role "User Access Administrator" --assignee-object-id $(az ad sp show --id xxxx-xxxxx-xxxxx-xxxx --query id -o tsv) 
      
      the following arguments are required: --scope
      Examples from AI knowledge base:az role assignment create --assignee sp_name --role a_roleCreate role assignment for an assignee.
      az role assignment create --assignee 00000000-0000-0000-0000-000000000000 --role "Storage Account Key Operator Service Role" --scope $idCreate a new role assignment for a user, group, or service principal. (autogenerated)
      https://docs.microsoft.com/en-US/cli/azure/role/assignment#az_role_assignment_createRead more about the command in reference docs    

      Version-Release number of selected component (if applicable):

          

      How reproducible:

          

      Steps to Reproduce:

          1.
          2.
          3.
          

      Actual results:

      Command fails to complete

      Expected results:

      contributor role should be added to SP     

      Additional info:

          

              kalexand@redhat.com Kathryn Alexander
              rhn-support-chdeshpa Chinmay Deshpande
              Jinyun Ma Jinyun Ma
              None
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

                Created:
                Updated:
                Resolved: