Hi all, I hope this is the right place for my question otherwise please point me to the right one. Just playing around with the latest nightly builds from Aug 29th and 27th and it seems AWS is not working anymore. I installed many OCP 4.1 versionw using the below listed AWS IAM user with has full admin privileges attached and it worked just fine. Now with 4.2 Delevoper Preview I just get tins of erros stating that the AWS permissions are not sufficient. Any idea?
[you@localhost 4.2DP]$ openshift-install version openshift-install v4.2.0-201908261819-dirty built from commit b8fd62510bd6cfedf90fd099e3af07347dbeae0b release image quay.io/openshift-release-dev/ocp-release-nightly@sha256:b443c6eb745c6e469c608036f4623af1190c11bd7598171ddc526a06545600d5<mailto:quay.io/openshift-release-dev/ocp-release-nightly@sha256:b443c6eb745c6e469c608036f4623af1190c11bd7598171ddc526a06545600d5> or [you@localhost 4.2DP]$ openshift-install version openshift-install v4.2.0-201908282219-dirty built from commit 4f3e73a0143ba36229f42e8b65b6e65342bb826b release image quay.io/openshift-release-dev/ocp-release-nightly@sha256:d48a15ea564293934eb188e6eb8737e56903453d50bc7 0830cdac2641fb63acc [you@localhost 4.2DP]$ aws sts get-caller-identity { "Account": "330549371101", "UserId": "AIDAJAE247FJ3SP5SYH6A", "Arn": "arn:aws:iam::330549371101:user/os4" } [you@localhost 4.2DP]$ aws iam list-attached-user-policies --user-name os4 { "AttachedPolicies": [ { "PolicyName": "AdministratorAccess", "PolicyArn": "arn:aws:iam::aws:policy/AdministratorAccess" } ] } [you@localhost OCP42DP]$ cat .openshift_install.log time="2019-08-29T06:21:19Z" level=debug msg="OpenShift Installer v4.2.0-201908261819-dirty" time="2019-08-29T06:21:19Z" level=debug msg="Built from commit b8fd62510bd6cfedf90fd099e3af07347dbeae0b" ... time="2019-08-29T06:23:19Z" level=debug msg=" Generating \"Platform Credentials Check\"..." time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="ec2:AllocateAddress" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="ec2:AssociateAddress" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="ec2:AssociateDhcpOptions" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="ec2:AssociateRouteTable" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="ec2:AttachInternetGateway" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="ec2:AuthorizeSecurityGroupEgress" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="ec2:AuthorizeSecurityGroupIngress" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="ec2:CopyImage" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="ec2:CreateDhcpOptions" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="ec2:CreateInternetGateway" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="ec2:CreateNatGateway" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="ec2:CreateRoute" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="ec2:CreateRouteTable" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="ec2:CreateSecurityGroup" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="ec2:CreateSubnet" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="ec2:CreateTags" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="ec2:CreateVpc" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="ec2:CreateVpcEndpoint" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="ec2:CreateVolume" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="ec2:DeleteSnapshot" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="ec2:DeregisterImage" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="ec2:DescribeAccountAttributes" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="ec2:DescribeAddresses" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="ec2:DescribeAvailabilityZones" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="ec2:DescribeDhcpOptions" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="ec2:DescribeImages" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="ec2:DescribeInstanceAttribute" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="ec2:DescribeInstanceCreditSpecifications" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="ec2:DescribeInstances" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="ec2:DescribeInternetGateways" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="ec2:DescribeKeyPairs" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="ec2:DescribeNatGateways" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="ec2:DescribeNetworkAcls" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="ec2:DescribePrefixLists" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="ec2:DescribeRegions" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="ec2:DescribeRouteTables" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="ec2:DescribeSecurityGroups" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="ec2:DescribeSubnets" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="ec2:DescribeTags" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="ec2:DescribeVpcEndpoints" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="ec2:DescribeVpcs" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="ec2:DescribeVpcAttribute" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="ec2:DescribeVolumes" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="ec2:DescribeVpcClassicLink" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="ec2:DescribeVpcClassicLinkDnsSupport" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="ec2:ModifyInstanceAttribute" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="ec2:ModifySubnetAttribute" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="ec2:ModifyVpcAttribute" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="ec2:RevokeSecurityGroupEgress" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="ec2:RunInstances" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="ec2:TerminateInstances" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="ec2:DeleteDhcpOptions" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="ec2:DeleteRoute" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="ec2:RevokeSecurityGroupIngress" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="ec2:DisassociateRouteTable" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="ec2:ReplaceRouteTableAssociation" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="ec2:DeleteRouteTable" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="ec2:DeleteSubnet" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="ec2:DescribeNetworkInterfaces" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="ec2:ModifyNetworkInterfaceAttribute" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="ec2:DeleteNatGateway" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="ec2:DeleteSecurityGroup" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="ec2:DetachInternetGateway" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="ec2:DeleteInternetGateway" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="ec2:ReleaseAddress" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="ec2:DeleteVpc" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="elasticloadbalancing:AddTags" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="elasticloadbalancing:ApplySecurityGroupsToLoadBalancer" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="elasticloadbalancing:AttachLoadBalancerToSubnets" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="elasticloadbalancing:CreateListener" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="elasticloadbalancing:CreateLoadBalancer" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="elasticloadbalancing:CreateLoadBalancerListeners" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="elasticloadbalancing:CreateTargetGroup" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="elasticloadbalancing:ConfigureHealthCheck" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="elasticloadbalancing:DeleteLoadBalancer" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="elasticloadbalancing:DeregisterInstancesFromLoadBalancer" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="elasticloadbalancing:DeregisterTargets" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="elasticloadbalancing:DescribeInstanceHealth" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="elasticloadbalancing:DescribeListeners" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="elasticloadbalancing:DescribeLoadBalancers" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="elasticloadbalancing:DescribeLoadBalancerAttributes" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="elasticloadbalancing:DescribeTags" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="elasticloadbalancing:DescribeTargetGroupAttributes" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="elasticloadbalancing:DescribeTargetHealth" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="elasticloadbalancing:ModifyLoadBalancerAttributes" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="elasticloadbalancing:ModifyTargetGroup" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="elasticloadbalancing:ModifyTargetGroupAttributes" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="elasticloadbalancing:RegisterTargets" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="elasticloadbalancing:RegisterInstancesWithLoadBalancer" time="2019-08-29T06:23:20Z" level=warning msg="Action not allowed with tested creds" action="elasticloadbalancing:SetLoadBalancerPoliciesOfListener" time="2019-08-29T06:23:20Z" level=warning msg="Tested creds not able to perform all requested actions" time="2019-08-29T06:23:20Z" level=fatal msg="failed to fetch Terraform Variables: failed to fetch dependency of \"Terraform Variables\": failed to fetch dependency of \"Bootstrap Ignition Config\": failed to fetch dependency of \"Master Machines\": failed to generate asset \"Platform Credentials Check\": validate AWS credentials: current credentials insufficient for performing cluster installation" Any idea what is goin wrong here? Thank you in advance! Mit freundlichen Grüßen / Best regards [cid:[email protected]] Jens-Uwe Walther Proservia GmbH & Co. KG Leutragraben 2-4 D-07743 Jena M: +49 (160) 97250976 [email protected]<mailto:[email protected]> www.proservia.de<http://www.proservia.de/> Proservia GmbH & Co. KG Sitz: Eschborn Registergericht: Frankfurt/M. HRB 78310 Geschäftsführer: Frederikus Scholte Terry Cade Dr. Alexander Wurdack This e-mail and its attachments may contain ManpowerGroup proprietary information, which is PRIVILEGED, CONFIDENTIAL, or subject to COPYRIGHT belonging to ManpowerGroup. This e-mail is intended solely for the use of the individual or entity to which it is addressed. If you are not the intended recipient of this e-mail, or the employee or agent responsible for delivering this e-mail to the intended recipient, you are hereby notified that any dissemination, distribution, copying, or action taken in relation to the contents of and attachments to this e-mail is STRICTLY PROHIBITED and may be UNLAWFUL. If you have received this e-mail in error, please notify the sender immediately and permanently delete the original and any copy of this e-mail and any printout. Thank you.
_______________________________________________ users mailing list [email protected] http://lists.openshift.redhat.com/openshiftmm/listinfo/users
