Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-56846

Azure: missing check for existence of user-assigned identity when installing cluster with identity type: UserAssigned

XMLWordPrintable

    • Quality / Stability / Reliability
    • False
    • Hide

      None

      Show
      None
    • None
    • Moderate
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None

      Description of problem:

      Specify identity in install-config as below, there is no user-assigned identity created under resource group jima-test—rg, `jima—test-identity` is a fake identity.
      =====
      platform:
        azure:
          defaultMachinePlatform:
            identity:
              type: UserAssigned
              userAssignedIdentities:
              - name: jima—test-identity
                resourceGroup: jima-test—rg
                subscription: 53b8f551-f0fc-4bea-8cba-6d1fefd54c8a    
      
      Created cluster, installer failed and timed out for machine to be provisioned, got error in .openshift-install.log
      time="2025-05-29T04:24:02Z" level=debug msg="\t--------------------------------------------------------------------------------"
      time="2025-05-29T04:24:02Z" level=debug msg="\tRESPONSE 400: 400 Bad Request"
      time="2025-05-29T04:24:02Z" level=debug msg="\tERROR CODE: FailedIdentityOperation"
      time="2025-05-29T04:24:02Z" level=debug msg="\t--------------------------------------------------------------------------------"
      time="2025-05-29T04:24:02Z" level=debug msg="\t{"
      time="2025-05-29T04:24:02Z" level=debug msg="\t  \"error\": {"
      time="2025-05-29T04:24:02Z" level=debug msg="\t    \"code\": \"FailedIdentityOperation\","
      time="2025-05-29T04:24:02Z" level=debug msg="\t    \"message\": \"Identity operation for resource '/subscriptions/53b8f551-f0fc-4bea-8cba-6d1fefd54c8a/resourceGroups/jimaidentity27a-j8rg4-rg/providers/Microsoft.Compute/virtualMachines/jimaidentity27a-j8rg4-master-1' failed with error 'Failed to perform resource identity operation. Status: 'BadRequest'. Response: '{\\\"error\\\":{\\\"code\\\":\\\"BadRequest\\\",\\\"message\\\":\\\"Resource '/subscriptions/53b8f551-f0fc-4bea-8cba-6d1fefd54c8a/resourcegroups/jima-test-rg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/jima-test-identity' was not found.\\\"}}'.'.\""
      time="2025-05-29T04:24:02Z" level=debug msg="\t  }"
      time="2025-05-29T04:24:02Z" level=debug msg="\t}"
      time="2025-05-29T04:24:02Z" level=debug msg="\t--------------------------------------------------------------------------------"
      
      

      Version-Release number of selected component (if applicable):

          4.19 nightly build

      How reproducible:

          Always

      Steps to Reproduce:

          1. Specify identity type to UserAssigned, set fake user-assigned identity in install-config
          2. Install cluster 
          3.
          

      Actual results:

          Installer failed at waiting for machine to be provisioned, some resources have been created.

      Expected results:

          Installer should check before creating resources and exit with a proper message.

      Additional info:

          

              Unassigned Unassigned
              jinyunma Jinyun Ma
              None
              None
              Jinyun Ma Jinyun Ma
              None
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Created:
                Updated: