This topic provides answers to frequently asked questions about using CloudOps Orchestration Service (OOS).
Why is the following error returned when I use OOS as a RAM user: User has no permission to do the action: (ListTemplates)?
Cause: The RAM user does not have the permissions to execute the specified API action of OOS.
Solution: Log on to the Resource Access Management (RAM) console by using an Alibaba Cloud account or an administrator account. Authorize the RAM user to call the specified API action or all API actions of OOS. For example, configure "Action": "oos:*" to authorize the RAM user to call all API actions of OOS. For more information, see Access control.
{
"Statement": [
{
"Effect": "Allow",
"Action": "oos:*",
"Resource": "*"
}
],
"Version": "1"
}Why is the following error returned when I use OOS as a RAM user: User has no permission to do the action: (PassRole)?
Cause: The RAM user is not allowed to use OOS as the specified RAM role because the RAM user does not have the PassRole permission.
Solution: Log on to the RAM console by using an Alibaba Cloud account or an administrator account. Grant the PassRole permission to the RAM user. For more information, see Access control.
{
"Statement": [
{
"Effect": "Allow",
"Action": "oos:*",
"Resource": "*"
}
],
"Version": "1"
}Why is the following error returned when I use a template: Assumes role failed. Code: EntityNotExist.Role, msg: The role not exists: acs:ram::111111:role/OOSServiceRole?
Cause: You have not created a default RAM role for your OOS service to access your Alibaba Cloud resources.
Solution: Log on to the RAM console by using an Alibaba Cloud account or an administrator account. Create the default RAM role OOSServiceRole for your OOS service. For more information, see Grant RAM permissions to OOS.
Why is the following error returned when I use a template: Assumes role failed. Code: NoPermission, msg: You are not authorized to do this action. You should be authorized by RAM?
Cause: You have not attached the required trust policy to the RAM role OOSServiceRole for your OOS service.
Solution: Log on to the RAM console by using an Alibaba Cloud account or an administrator account. Attach the required trust policy to the RAM role OOSServiceRole assumed by your OOS service. For more information, see Grant RAM permissions to OOS.
1. Log on to the RAM console. In the left-side navigation pane, choose Identities > Roles. On the Roles page, enter OOSServiceRole in the search box to search for the role.
2. Click the role name to go to the details page of the role. Click the Trust Policy Management tab.
3. Modify the trust policy of the role.
Replace the trust policy with the following content:
{
"Statement": [
{
"Action": "sts:AssumeRole",
"Effect": "Allow",
"Principal": {
"Service": [
"oos.aliyuncs.com"
]
}
}
],
"Version": "1"
}Why is the following error returned when I use a template: Code: Forbidden.RAM, Message: User not authorized to operate on the specified resource, or this API doesn't support RAM?
Cause: The RAM user or RAM role does not have the permissions to access the specified resources.
Solution: Grant required permissions to the RAM user or RAM role. For more information, see Grant permissions to a RAM user and Grant permissions to a RAM role.
Why is the following error returned when I perform a temporary bandwidth upgrade: code: InvalidAccountStatus.NotEnoughBalance message: Your account does not have enough balance?
Cause: The temporary bandwidth upgrade task fails to be created due to an insufficient account balance.
Solution: Add funds to your account and try again.
Why is the following error returned when I perform a temporary bandwidth upgrade: code: InvalidBandwidth.ValueNotSupported message: Instance upgrade bandwidth of temporary not allow less then existed?
Cause: The bandwidth specified in the temporary bandwidth upgrade task is lower than the existing bandwidth.
Solution:
On the Overview page of the OOS console, search for temporary bandwidth upgrade tasks based on Elastic Compute Service (ECS) instance ID. Check whether a duplicate upgrade task exists.
If a duplicate upgrade task exists, delete the task.
If such a duplicate upgrade task does not exist, go to the ECS console. In the left-side navigation pane, click Instances. On the Instance page, click the name or ID of the instance that you want to query. View the upgrade logs on the Operation Records tab.
Why is the following error returned when I perform a temporary bandwidth upgrade: code: OperationDenied.UnpaidOrder message: The specified instance has unpaid order?
Cause: The ECS instance that you want to manage has one or more unpaid bills.
Solution: Pay the bills.
Why is the following error returned when I run a command: runCommand loop task fail because failures exceeded MaxErrors -> runCommand execution failed, checkInvocationResult Invocation.InvocationResults.InvocationResult[].ExitCode expect in [0] but is 1?
Cause: The exit code of the Cloud Assistant command is not 0.
Solution: Troubleshoot the error by viewing the output and logs of the child execution. For more information, see View the execution details.
How do I troubleshoot command errors?
Solution: For more information, see Query execution results and fix common problems.