Resizing OpenShift Master Nodes

Question

Resizing OpenShift Master Nodes

Günter Weisz 0

Hi,

We am looking to resize our Azure Red Hat OpenShift Master nodes, however we are unable to. We are currently getting the below error message:

"Failed to resize virtual machine 'aro-master-0' to size 'Standard D8ds v4'. Error: The client 'support@*' with object id 'y8b2asd1d-85b8-63f6-1234-d1f97145dd5' has permission to perform action 'Microsoft.Compute/virtualMachines/write' on scope '/subscriptions/k9981ea6-c68h-1234-9d25-b738d1af6dy2/resourceGroups/aro-infra-m56r9jr2-aro-01/providers/Microsoft.Compute/virtualMachines/aro-master-0'; however, the access is denied because of the deny assignment with name 'a96e9154-545e-50e2-8366-abhd0714a1a64' and Id 'a96e9154545e50e28366aaa0714a1a64' at scope '/subscriptions/ k9841ea6-c68h-1234-9d25-b738d1af6dy2/resourcegroups/ aro-infra-m56r9jr2-aro-01’."

We have confirmed the tenant has enough quota capacity for the compute series.

Could you advise on how we can resize the master nodes?

Thanks

Anonymous

2025-03-13T18:50:58.8633333+00:00
Hi Günter Weisz,

The error you are experiencing suggests that a deny assignment is currently in effect, which is hindering your ability to resize the master nodes in Azure Red Hat OpenShift (ARO). The error message specifically mentions a deny assignment with the ID a96e9154-545e-50e2-8366-abhd0714a1a64 at the resource group level.

This deny assignment is likely the reason for the restriction on resizing the virtual machine.

To resolve this issue, please follow these steps:

Access the Azure Portal and navigate to Azure Active Directory.

Under the Security section, select Conditional Access.

Proceed to Deny assignments, or alternatively, go directly to Access Control (IAM) for the relevant resource group.

az role assignment list --scope "/subscriptions/{subscriptionId}/resourceGroups/aro-infra-m56r9jr2-aro-01" --all --output json

To eliminate the Deny Assignment:

Navigate to Access Control (IAM) within the Azure portal for the relevant resource group. Look for the deny assignment associated with the specified ID a96e9154-545e-50e2-8366-abhd0714a1a64. After identifying it, you can proceed to remove the deny assignment by selecting it and clicking on the Delete option.

az role assignment delete --assignee "support@*" --scope "/subscriptions/{subscriptionId}/resourceGroups/aro-infra-m56r9jr2-aro-01" --role "Deny assignment"

Remove-AzRoleAssignment -Assignee "support@*" -Scope "/subscriptions/{subscriptionId}/resourceGroups/aro-infra-m56r9jr2-aro-01" -Role "Deny assignment"

If you found it helpful, could you kindly click the “upvote” on the post.

3 answers

Your answer

Anonymous

2025-03-13T18:50:58.8633333+00:00

Hi Günter Weisz,

The error you are experiencing suggests that a deny assignment is currently in effect, which is hindering your ability to resize the master nodes in Azure Red Hat OpenShift (ARO). The error message specifically mentions a deny assignment with the ID a96e9154-545e-50e2-8366-abhd0714a1a64 at the resource group level.

This deny assignment is likely the reason for the restriction on resizing the virtual machine.

To resolve this issue, please follow these steps:

Access the Azure Portal and navigate to Azure Active Directory.

Under the Security section, select Conditional Access.

Proceed to Deny assignments, or alternatively, go directly to Access Control (IAM) for the relevant resource group.

az role assignment list --scope "/subscriptions/{subscriptionId}/resourceGroups/aro-infra-m56r9jr2-aro-01" --all --output json

To eliminate the Deny Assignment:

Navigate to Access Control (IAM) within the Azure portal for the relevant resource group. Look for the deny assignment associated with the specified ID a96e9154-545e-50e2-8366-abhd0714a1a64. After identifying it, you can proceed to remove the deny assignment by selecting it and clicking on the Delete option.

az role assignment delete --assignee "support@*" --scope "/subscriptions/{subscriptionId}/resourceGroups/aro-infra-m56r9jr2-aro-01" --role "Deny assignment"

Remove-AzRoleAssignment -Assignee "support@*" -Scope "/subscriptions/{subscriptionId}/resourceGroups/aro-infra-m56r9jr2-aro-01" -Role "Deny assignment"

If you found it helpful, could you kindly click the “upvote” on the post.

Answer 1

LISBOA-MSFT 245 Microsoft Employee

Hi Günter Weisz,

Can you Accept the answer that I have provided, it's the only way to resize Master Nodes from ARO cluster running on Azure.

I hope it's fine for you.

att,

Lisboa

0 comments

Answer 2

Deleted

This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

Comments have been turned off. Learn more

Answer 3

Hi Günter Weisz,

Welcome to the Microsoft Q&A Platform! Thank you for asking your question here.

I understand that you are experiencing issue when trying to resize master nodes of ARO cluster.

I'd like to inform you that it's not possible to resize the VM size of Azure Red Hat OpenShift Master nodes on your end. This action it's performed only by SRE team, as per any other maitenance on Master nodes.

To get assistance and quick response to solve this issue, please Open support requests on our Portal - Service bus

https://learn.microsoft.com/en-us/services-hub/unified/support/open-support-requests?pivots=existing

Once you have opened the Support Request, let me know the number and I can help to address this till the solution.

If it was helpful, please Accept the Answer and click "Upvote" on this post to let us know.

Thank You.

Lisboa

Share via

Resizing OpenShift Master Nodes

3 answers

Your answer