fedora-infrastructure

#9403 AWS: unable to see node group updates
Closed: Fixed by mvadkert. Opened by mvadkert.

Closed: Fixed
Reopen Issue

Seems we are missing some permissions for seeing the update for our node groups

Error loading available AMI versions. This might impact your ability to see available updates for your Node Groups.
User: arn:aws:sts::125523088429:assumed-role/aws-fedora-ci/mvadkert is not authorized to perform: ssm:GetParameter on resource: arn:aws:ssm:us-east-1:125523088429:parameter/aws/service/eks/optimized-ami/1.16/amazon-linux-2/recommended

Metadata Update from @mohanboddu:
- Issue tagged with: medium-gain, medium-trouble, ops

Metadata Update from @mohanboddu:
- Issue priority set to: Waiting on Assignee (was: Needs Review)

Metadata Update from @pingou:
- Issue tagged with: aws

That error is caused due to eks looking up the latest AMI-ID in the system manager parameter store.

I've added the ssm:GetParameter permission which should hopefully solve this issue. Let me know if there is any issues

looks good, thanks

Metadata Update from @mvadkert:
- Issue close_status updated to: Fixed
- Issue status updated to: Closed (was: Open)
Metadata
None

aws medium-gain medium-trouble ops

None
None
Normal
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.