This topic provides answers to frequently asked questions (FAQ) about using CloudOps Orchestration Service (OOS).
What do I do if the "User has no permission to do the action: (ListTemplates)" error message appears when I use OOS as a RAM user?
Cause: The Resource Access Management (RAM) user does not have the permissions to execute the specified API action of OOS.
Solution: Log on to the RAM console with an Alibaba Cloud account or an administrator account. Authorize the RAM user to call the specified API action or all API actions of OOS. For example, configure "Action": "oos:*" to authorize the RAM user to call all API actions of OOS. For more information, see Access control.
{
"Statement": [
{
"Effect": "Allow",
"Action": "oos:*",
"Resource": "*"
}
],
"Version": "1"
}What do I do if the "User has no permission to do the action: (PassRole)" error message appears when I use OOS as a RAM user?
Cause: The RAM user does not have the PassRole permission to execute the specified API action of CloudOps Orchestration Service.
Solution: Log on to the RAM console with an Alibaba Cloud account or an administrator account. Grant the PassRole permission to the RAM user. For more information, see Access control.
{
"Version": "1",
"Statement": [
{
"Effect": "Allow",
"Action": "ram:PassRole",
"Resource": "*"
}
]
}What do I do if the "Assumes role failed. Code: EntityNotExist.Role, msg: The role not exists: acs:ram::111111:role/OOSServiceRole" error message appears when I execute a template?
Cause: You have not created a default RAM role for your OOS service to access your Alibaba Cloud resources.
Solution: Log on to the RAM console with an Alibaba Cloud account or an administrator account. Create the default RAM role OOSServiceRole for your OOS service. For more information, see Use RAM to grant permissions to OOS.
What do I do if the "Assumes role failed. Code: NoPermission, msg: You are not authorized to do this action. You should be authorized by RAM" error message appears when I use a template?
Cause: You have not attached the required trust policy to the RAM role OOSServiceRole for your OOS service.
Solution: Log on to the RAM console with an Alibaba Cloud account or an administrator account. Attach the required trust policy to the RAM role OOSServiceRole assumed by your OOS service. For more information, see Use RAM to grant permissions to OOS.
1. Log on to the RAM console. In the left-side navigation pane, choose Identities > Roles. On the Roles page, enter OOSServiceRole in the search box to search for the role.
2. Click the role name to go to the details page of the role and click the Trust Policy Management tab.
3. Modify the trust policy of the role.
Replace the trust policy with the following content:
{
"Statement": [
{
"Action": "sts:AssumeRole",
"Effect": "Allow",
"Principal": {
"Service": [
"oos.aliyuncs.com"
]
}
}
],
"Version": "1"
}What do I do if the "Code: Forbidden.RAM, Message: User not authorized to operate on the specified resource, or this API doesn't support RAM" error message appears when I execute a template?
Cause: The RAM user or RAM role does not have the permissions to access the specified resources.
Solution: Grant required permissions to the RAM user or RAM role. For more information, see Query the RAM policy required for template execution, Grant permissions to a RAM user, and Grant permissions to a RAM role.
What do I do if the "code: InvalidAccountStatus.NotEnoughBalance message: Your account does not have enough balance" error message appears when I perform a temporary bandwidth upgrade?
Cause: The temporary bandwidth upgrade task fails to be created due to an insufficient account balance.
Solution: Add funds to your account and try again.
What do I do if the "code: InvalidBandwidth.ValueNotSupported message: Instance upgrade bandwidth of temporary not allow less then existed" error message appears when I perform a temporary bandwidth upgrade?
Cause: The bandwidth specified in the temporary bandwidth upgrade task is lower than the existing bandwidth.
Solution:
On the Overview page of the OOS console, search for temporary bandwidth upgrade tasks based on Elastic Compute Service (ECS) instance ID. Check whether a duplicate upgrade task exists.
If a duplicate upgrade task exists, delete the task.
If such a duplicate upgrade task does not exist, go to the ECS console. In the left-side navigation pane, click Instances. On the Instance page, click the name or ID of the instance that you want to query. View the upgrade logs on the Operation Records tab.
What do I do if the "code: OperationDenied.UnpaidOrder message: The specified instance has unpaid order" error message appears when I perform a temporary bandwidth upgrade?
Cause: The ECS instance that you want to manage has one or more unpaid bills.
Solution: Pay the bills.
What do I do if the "runCommand loop task fail because failures exceeded MaxErrors -> runCommand execution failed, checkInvocationResult Invocation.InvocationResults.InvocationResult[].ExitCode expect in [0] but is 1" error message appears when I run a command?
Cause: The exit code of the Cloud Assistant command is not 0.
Solution: Troubleshoot the error by viewing the output and logs of the child execution. For more information, see View the details of an execution.
What do I do if I create an O&M task but I cannot find it?
Cause: The task may exist in another region.
Solution: View the tasks that are executed in all regions on the Overview page.
How do I troubleshoot command errors?
Solution: For more information, see the "Command errors and solutions" section of the Check execution results and troubleshoot common issues topic.