+++ This bug was initially created as a clone of Bug #1810865 +++ Description of problem: Problem: The cloud credential operator not works in aws china, because they are not using the correct api endpoint and regions. Errors: error while validating cloud credentials: failed checking create cloud creds: error gathering AWS credentials details: error querying username: InvalidClientTokenId: The security token included in the request is invalid.\n\tstatus code: 403, request id: 23761878-8741-4472-a1a4-5e959e055725 Ref: Aws china api endpoints: https://docs.amazonaws.cn/en_us/aws/latest/userguide/endpoints-arns.html Version-Release number of selected component (if applicable): How reproducible: always Steps to Reproduce: 1. 2. 3. Actual results: Expected results: Additional info:
I have tested on other regions, the cloud credential operator can work well. test payload:4.4.0-0.nightly-2020-03-08-235004 Can you help to verify on AWS China?
(In reply to wang lin from comment #3) > I have tested on other regions, the cloud credential operator can work well. > test payload:4.4.0-0.nightly-2020-03-08-235004 > Can you help to verify on AWS China? Sorry for Haoran, this comment should be put in bugID=1810865. I test it on payload 4.4. I haven't test on OCP4.5 yet. Sorry again.
Has verified other region on OCP-4.5.0,CCO can work well. test payload:4.5.0-0.nightly-2020-03-10-211937 Please help to check whether it fixed on AWS-China
Verified with : registry.svc.ci.openshift.org/ocp/release:4.5.0-0.nightly-2020-03-12-031748
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2020:2409