-
Feature Request
-
Resolution: Done
-
Critical
-
None
-
None
-
False
-
False
-
-
-
-
1. Proposed title of this feature request
Allow the use of existing IAM instance profiles in an IPI insallation
2. What is the nature and description of the request?
Customer would like to use existing IAM instance profiles. When using existing IAM role, the installer still tries to create a new IAM instance profile. This causes the install to fail is the user does not have permission to create instance profiles.
3. Why does the customer need this? (List the business requirements here)
Customer wants to be able to install OCP even if the user does not have create role or create instance permission, and they do not want to do a UPI installation.
4. List any affected packages or components.
Customer has a workaround they implemented by editing the terraform scripts:
- data/data/aws/bootstrap/main.tf
- data/data/aws/cluster/master/main.tf
- data/data/aws/cluster/iam/main.tf
fThe alteration causes openshift-install to look for a pre-provisioned aws_iam_instance_profile in cases where a pre-provisioned iam_role_name is specified in install-config.yaml.
- is related to
-
RFE-4016 Ability to add ARN for resources (master + worker) in the install-config.yml while doing AWS IPI installation
- Rejected
-
OCPSTRAT-124 Add support to IAM instance profiles in AWS for OpenShift installations
- Closed