#9403 AWS: unable to see node group updates
Closed: Fixed 3 years ago by mvadkert. Opened 3 years ago by mvadkert.

Seems we are missing some permissions for seeing the update for our node groups

Error loading available AMI versions. This might impact your ability to see available updates for your Node Groups.
User: arn:aws:sts::125523088429:assumed-role/aws-fedora-ci/mvadkert is not authorized to perform: ssm:GetParameter on resource: arn:aws:ssm:us-east-1:125523088429:parameter/aws/service/eks/optimized-ami/1.16/amazon-linux-2/recommended

Metadata Update from @mohanboddu:
- Issue tagged with: medium-gain, medium-trouble, ops

3 years ago

Metadata Update from @mohanboddu:
- Issue priority set to: Waiting on Assignee (was: Needs Review)

3 years ago

Metadata Update from @pingou:
- Issue tagged with: aws

3 years ago

That error is caused due to eks looking up the latest AMI-ID in the system manager parameter store.

I've added the ssm:GetParameter permission which should hopefully solve this issue. Let me know if there is any issues

Metadata Update from @mvadkert:
- Issue close_status updated to: Fixed
- Issue status updated to: Closed (was: Open)

3 years ago

Login to comment on this ticket.

Metadata
Boards 1
ops Status: Done