Azure / Azure/azure-cli

az aro create - Insufficient privileges to complete the operation.

Open
#27,352 6 comments 0 reactions 0 assignees View on GitHub
act-codegen-extensibility-squad ARO Auto-Assign Auto-Resolve bug customer-reported Service Attention
Dominant language
Python
Stars
4.6k
Forks
3.5k
Avg merge
3d 2h
Merged PRs (30d)
60

Description

### Describe the bug

az aro create results in Insufficient privileges to complete the operation.

Have already confirmed the following:

Registered providers:
Microsoft.Authorization
Microsoft.Storage
Microsoft.Compute
Microsoft.RedHatOpenShift

Service Principal already granted Directory.Read.All permissions

Executing command
az aro create with --client-id ${var.CLIENTID} --client-secret ${var.CLIENTSECRET} in the command

### Related command

az aro create --resource-group ${azurerm_resource_group.aro.name} --cluster-resource-group ${local.rg-clustername} --name ${local.aro-name} --vnet ${local.vnet-name} --vnet-resource-group ${local.vnet-rg-name} --master-subnet ${local.subnet-name-master} --worker-subnet ${local.subnet-name-worker} --master-vm-size ${var.master-node-size} --worker-vm-size ${var.worker-node-size} --worker-vm-size ${var.worker-node-size} --subscription ${var.subscription-guid} --pull-secret @pull-secret.txt --client-id ${var.clientid} --client-secret ${var.clientsecret} --debug

### Errors

`null_resource.aro (local-exec): DEBUG: urllib3.connectionpool: [https://graph.windows.net:443](https://graph.windows.net/) "GET /]
2023-09-09T03:13:42.2792487Z │ INFO: az_command_data_logger: exit code: 1
2023-09-09T03:13:42.2792832Z │ INFO: cli.__main__: Command ran in 1.638 seconds (init: 0.144, invoke:
2023-09-09T03:13:42.2793085Z │ 1.494)
2023-09-09T03:13:42.2793393Z │ INFO: telemetry.save: Save telemetry record of length 3248 in cache
2023-09-09T03:13:42.2793700Z │ WARNING: telemetry.check: Negative: The
2023-09-09T03:13:42.2794173Z │ /home/vsts_azpcontainer/.azure/telemetry.txt was modified at 2023-09-09
2023-09-09T03:13:42.2794530Z │ 03:13:16.896036, which in less than 600.000000 s
2023-09-09T03:13:42.2794888Z │ DEBUG: cli.azure.cli.core.auth.identity: _dump_msal_http_cache:
2023-09-09T03:13:42.2795214Z │ /home/vsts_azpcontainer/.azure/msal_http_cache.bin
2023-09-09T03:13:42.2795444Z │ 
2023-09-09T03:13:42.2795637Z ╵
2023-09-09T03:13:42.3653051Z time=2023-09-09T03:13:42Z level=error msg=1 error occurred:
2023-09-09T03:13:42.3653350Z * exit status 1

### Expected behavior

ARO cluster created via az aro create

### Environment Summary

azure-cli 2.33.1 *

core 2.33.1 *
telemetry 1.0.6 *

Extensions:
azure-devops 0.23.0

Dependencies:
msal 1.16.0
azure-mgmt-resource 20.0.0

### Additional context

_No response_

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.