search

cybergis / cybergis-cloud

1 stars 0 forks source link

Cluster creation failure on some accounts with strict permissions #1

Open anuj-p opened 5 months ago

anuj-p commented 5 months ago

ParallelCluster fails to create clusters on some accounts due to insufficient permissions. I believe this is because ParallelCluster (inaccurately) attempts to use roles and policies it creates as few times as possible or because default account policies have been modified. Forcing ParallelCluster to use a non-default role with pre-specified permissions will likely resolve this problem.

anuj-p commented 4 months ago

Functionality to add explicit permissions for the cluster (via roles) has been added. I need to contact AWS Support to get an exact list of permissions (since permissions listed in ParallelCluster docs are insufficient.) As a side note, it may be that, using ParallelCluster through CloudFormation uses more permissions than those mentioned in docs.