Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-58170

Missing Azure Role Permissions

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Undefined Undefined
    • None
    • 4.18.z, 4.19.z
    • None
    • Quality / Stability / Reliability
    • False
    • Hide

      None

      Show
      None
    • 2
    • None
    • None
    • None
    • None
    • None
    • Agent Sprint 273
    • 1
    • None
    • None
    • None
    • None
    • None
    • None
    • None

      Description of problem:

      When you follow the Azure documentation section of IPI installation when using an existing VNet the permissions
      
      Microsoft.ManagedIdentity/register/action
      Microsoft.Network/virtualNetworks/checkIpAddressAvailability/read
      
      Are missing as required from the documentation and causes the install to fail to create manifests because the api call fails to retreive the availble ip address as without the checkIpAddressAvailability/read permission the call succeed with a 200 repsonse but an empty result list of avaiable ips.

      Version-Release number of selected component (if applicable):

          

      How reproducible:

          Use a custom role for the service principal and not include the permissions and the install fails

      Steps to Reproduce:

          1.
          2.
          3.
          

      Actual results:

      Install fails not able to find lb ip    

      Expected results:

          Installation succeeds

      Additional info:

          

              ocp-docs-bot OCP DocsBot
              rhn-gps-jmathian Joshua Mathianas
              None
              None
              Jinyun Ma Jinyun Ma
              None
              Votes:
              0 Vote for this issue
              Watchers:
              6 Start watching this issue

                Created:
                Updated: