Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Assume Role does not work for NetApp connector & CVO deployment #122

Open
bryanheo opened this issue Aug 17, 2022 · 3 comments
Open

Assume Role does not work for NetApp connector & CVO deployment #122

bryanheo opened this issue Aug 17, 2022 · 3 comments
Labels
enhancement New feature or request Jira Has an Internal Jira Story

Comments

@bryanheo
Copy link

bryanheo commented Aug 17, 2022

Hello

We are trying to deploy Connector and CVO via assume role as shown below but it returns an error 'UnauthorizedOperation'.
When we deploy the connector and CVO with IAM user, the deployment works fine. Both IAM user and Assume role use the same policy.
AWS resources are also created with the assume role but only netapp-cloudmanager_connector_aws and netapp-cloudmanager_cvo_aws are not created

Can NetApp resources be deployed by Assume role rather than IAM user?

provider "aws" {
  region = var.region

  assume_role {
    role_arn     = "arn:aws:iam::${var.account_id}:role/tfe-netapp-deploy"
    session_name = "tfe-netapp"
  }

}

Error
Screenshot 2022-08-17 at 21 41 06

Regards
Moon

@bryanheo bryanheo changed the title Assume Role does not work for NetApp Assume Role does not work for NetApp connector & CVO deployment Aug 17, 2022
@lonico
Copy link
Contributor

lonico commented Aug 17, 2022

Yes, this is not supported at present. This is something we are currently working on for FSxN.

@lonico lonico added the enhancement New feature or request label Aug 17, 2022
@bryanheo
Copy link
Author

@lonico Thank you for the confirmation.
We will use IAM user for now

@lonico lonico added the Jira Has an Internal Jira Story label Aug 18, 2022
@lonico
Copy link
Contributor

lonico commented Aug 18, 2022

DEVOPS-5351

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request Jira Has an Internal Jira Story
Projects
None yet
Development

No branches or pull requests

2 participants