Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 1800329

Summary: Move IAM role check to after manifest generation
Product: OpenShift Container Platform Reporter: Mike Barrett <mbarrett>
Component: InstallerAssignee: Abhinav Dahiya <adahiya>
Installer sub component: openshift-installer QA Contact: Johnny Liu <jialiu>
Status: CLOSED DUPLICATE Docs Contact:
Severity: urgent    
Priority: unspecified    
Version: 4.3.z   
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2020-02-06 21:23:35 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Mike Barrett 2020-02-06 21:16:54 UTC 
Description of problem:

https://issues.redhat.com/browse/CORS-1304

Today the OCP4 IPI and UPI install will check the AWS account given to it for all of these IAM roles:

https://gist.github.com/sjenning/f0a6eb84475839cf81f601553532304a

Even if the user installing the cluster has not desire to have their resulting cluster perform those activities that need those IAM roles.  This check is at the beginning of the installation before the installation manifests are generated that would tell the install what the cluster is being asked to do.

This bug is to ask that the IAM role check (which is still valid and needed) be moved after the manifest generation process so that it can more correctly check the given IAM roles against what the cluster will be doing.
Comment 1 Abhinav Dahiya 2020-02-06 21:23:35 UTC 

*** This bug has been marked as a duplicate of bug 1796347 ***