control-plane-operator logs shows errors due to missing CreateTags permissions. These permissions are not necessary for ROSA, thus the errors are a red herring for investigations into cluster issues.

    4.17.z 4.16.z 4.15.z 4.14.z

    100%

    1. Create a ROSA HCP cluster 
    2. Inspect CAPA logs
    

CAPA error log for createTags:
arn:aws:sts::123:assumed-role/test-kube-system-capa-controller-manager/1234 is not authorized to perform: ec2:CreateTags on resource: arn:aws:ec2:ap-southeast-1:123:network-interface/eni-id

   No error log as the fallback works.