2024-07-11 17:41:08 +05:30
|
|
|
// Module included in the following assemblies:
|
|
|
|
|
//
|
|
|
|
|
// Hosted control plane assemblies
|
|
|
|
|
// * hosted_control_planes/hcp-authentication-authorization.adoc
|
|
|
|
|
|
|
|
|
|
:_mod-docs-content-type: PROCEDURE
|
|
|
|
|
[id="hcp-cco-verify-aws-sts_{context}"]
|
|
|
|
|
= Verifying the CCO installation in a hosted cluster on {aws-short}
|
|
|
|
|
|
|
|
|
|
You can verify that the Cloud Credential Operator (CCO) is running correctly in your hosted control plane.
|
|
|
|
|
|
|
|
|
|
.Prerequisites
|
|
|
|
|
|
|
|
|
|
* You configured the hosted cluster on {aws-first}.
|
|
|
|
|
|
|
|
|
|
.Procedure
|
|
|
|
|
|
|
|
|
|
. Verify that the CCO is configured in a manual mode in your hosted cluster by running the following command:
|
|
|
|
|
+
|
|
|
|
|
[source,terminal]
|
|
|
|
|
----
|
2025-03-17 08:42:39 +01:00
|
|
|
$ oc get cloudcredentials <hosted_cluster_name> \
|
|
|
|
|
-n <hosted_cluster_namespace> \
|
|
|
|
|
-o=jsonpath={.spec.credentialsMode}
|
2024-07-11 17:41:08 +05:30
|
|
|
----
|
|
|
|
|
+
|
|
|
|
|
.Expected output
|
|
|
|
|
[source,terminal]
|
|
|
|
|
----
|
|
|
|
|
Manual
|
|
|
|
|
----
|
|
|
|
|
|
|
|
|
|
. Verify that the value for the `serviceAccountIssuer` resource is not empty by running the following command:
|
|
|
|
|
+
|
|
|
|
|
[source,terminal]
|
|
|
|
|
----
|
2025-03-17 08:42:39 +01:00
|
|
|
$ oc get authentication cluster --kubeconfig <hosted_cluster_name>.kubeconfig \
|
|
|
|
|
-o jsonpath --template '{.spec.serviceAccountIssuer }'
|
2024-07-11 17:41:08 +05:30
|
|
|
----
|
|
|
|
|
+
|
|
|
|
|
.Example output
|
|
|
|
|
[source,terminal]
|
|
|
|
|
----
|
|
|
|
|
https://aos-hypershift-ci-oidc-29999.s3.us-east-2.amazonaws.com/hypershift-ci-29999
|
|
|
|
|
----
|
