Comments (4)
@julienstroheker we sometimes see this error, both in dev and in prod. It is like https://docs.microsoft.com/en-us/azure/role-based-access-control/troubleshooting#rbac-changes-are-not-being-detected . I assume there is some caching somewhere in ARM. I understand we should make the RBAC change, then refresh our access token; the problem is I think we are doing that correctly and we still get the error occasionally. Please can you look into this and try to understand what else we need to do? Does the v3 RP do additional tricks here?
from aro-rp.
I also get this too
ERRO[2020-02-21T12:01:30+10:00] pkg/frontend/frontend.go:268 frontend.reply() authorization.PermissionsClient#ListForResource: Failure responding to request: StatusCode=403 -- Original Error: autorest/azure: Service returned an error. Status=403 Code="AuthorizationFailed" Message="The client '99d7cb4b-e087-4c94-8ced-3e15b07a870a' with object id '99d7cb4b-e087-4c94-8ced-3e15b07a870a' does not have authorization to perform action 'Microsoft.Authorization/permissions/read' over scope '/subscriptions/225e02bc-43d0-43d1-a01a-17e584a4ef69/resourcegroups/v4-australiasoutheast/providers/Microsoft.Network/virtualNetworks/dev-vnet/providers/Microsoft.Authorization' or the scope is invalid. If access was recently granted, please refresh your credentials." component=frontend correlation-id= request-id=9bac8f35-12df-4aaa-8f9f-74f70c075979
from aro-rp.
https://gist.github.com/mjudeikis/81dc0f875d794992fb724df1f0c0ada8
from aro-rp.
dynamic validation has moved to backend, closing this.
from aro-rp.
Related Issues (20)
- Flake: TestRefreshingCertificate panics HOT 6
- Unit test node controller via Reconcile method
- Debug `timed out waiting for the condition` in e2e operator checks
- Debug `timed out waiting for the condition` in e2e cluster smoke test
- Remove from NSG e2e test turning on operator NSG reconciliation after we default to being on HOT 2
- rvfvthrbdivfibvluiddgkhj
- Remove mdsd chown cron HOT 2
- Required permissions to create an ARO cluster HOT 1
- Add --ultra-ssd-enabled true flag to worker VM provisioning to enable UltraSSD persistent volumes
- Creating Int environments
- ARO operator retrieves default ingress IP in wrong way
- The secrets-update target fails if the specified file name exists in the blob.
- Off by one error resource group name truncation during shared dev provisioning
- CLI --pull-secret option and error does not specify input format HOT 1
- Migrating to Microsoft Graph for az cli
- Breaking changes introduced by Microsoft Graph -- objectId is now id HOT 1
- Azure Public Api's for Web App
- Please remove mwoodson from this repo HOT 1
- Upgrade "github.com/ugorji/go/codec" dependency to 1.29 HOT 1
- Validation errors should return an appropriate error messages HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from aro-rp.