Uploaded image for project: 'OpenShift Request For Enhancement'
  1. OpenShift Request For Enhancement
  2. RFE-2596

Allow the use of existing IAM instance profiles in an IPI installation

XMLWordPrintable

    • False
    • False

      1. Proposed title of this feature request
      Allow the use of existing IAM instance profiles in an IPI insallation

      2. What is the nature and description of the request?
      Customer would like to use existing IAM instance profiles. When using existing IAM role, the installer still tries to create a new IAM instance profile. This causes the install to fail is the user does not have permission to create instance profiles.

      3. Why does the customer need this? (List the business requirements here)
      Customer wants to be able to install OCP even if the user does not have create role or create instance permission, and they do not want to do a UPI installation.

      4. List any affected packages or components.
      Customer has a workaround they implemented by editing the terraform scripts:

      • data/data/aws/bootstrap/main.tf
      • data/data/aws/cluster/master/main.tf
      • data/data/aws/cluster/iam/main.tf

      fThe alteration causes openshift-install to look for a pre-provisioned aws_iam_instance_profile in cases where a pre-provisioned iam_role_name is specified in install-config.yaml.

       

       

              mak.redhat.com Marcos Entenza Garcia
              rhn-support-cshepher Christine Shepherd
              Votes:
              0 Vote for this issue
              Watchers:
              13 Start watching this issue

                Created:
                Updated:
                Resolved: