// Module included in the following assemblies:
//
// * support/rosa-troubleshooting-installations.adoc

:_mod-docs-content-type: PROCEDURE
[id="rosa-troubleshooting-installing_{context}"]
= Installation troubleshooting

[role="_abstract"]
This procedure describes how to troubleshoot installation issues for {product-title} clusters.

.Procedure

* Inspect install or uninstall logs:
** To display install logs, run the following command, replacing `<cluster_name>` with the name of your cluster:
+
[source,terminal]
----
$ rosa logs install --cluster=<cluster_name>
----
+
** To watch the logs, include the `--watch` flag:
+
[source,terminal]
----
$ rosa logs install --cluster=<cluster_name> --watch
----
+
** To display uninstall logs, run the following command, replacing `<cluster_name>` with the name of your cluster:
+
[source,terminal]
----
$ rosa logs uninstall --cluster=<cluster_name>
----
+
** To watch the logs, include the `--watch` flag:
+
[source,terminal]
----
$ rosa logs uninstall --cluster=<cluster_name> --watch
----

ifndef::openshift-rosa-hcp[]
* Verify your AWS account permissions for clusters without STS:
+
Run the following command to verify if your AWS account has the correct permissions. This command verifies permissions only for clusters that do not use the AWS Security Token Service (STS):
+
[source,terminal]
----
$ rosa verify permissions
----
+
If you receive any errors, double check to ensure than an link:https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_type-auth.html#orgs_manage_policies_scp[SCP] is not applied to your AWS account. If you are required to use an SCP, see link:https://www.openshift.com/dedicated/ccs#scp[Red{nbsp}Hat Requirements for Customer Cloud Subscriptions] for details on the minimum required SCP.
endif::openshift-rosa-hcp[]

* Verify your AWS account and quota:
+
Run the following command to verify you have the available quota on your AWS account:
+
[source,terminal]
----
$ rosa verify quota
----
+
AWS quotas change based on region. Be sure you are verifying your quota for the correct AWS region. If you need to increase your quota, go to your link:https://aws.amazon.com/console/[AWS console], and request a quota increase for the service that failed.

* AWS notification emails:
+
When creating a cluster, the {product-title} service creates small instances in all supported regions. This check ensures the AWS account being used can deploy to each supported region.
+
For AWS accounts that are not using all supported regions, AWS might send one or more emails confirming that "Your Request For Accessing AWS Resources Has Been Validated." Typically the sender of this email is aws-verification@amazon.com.
+
This is expected behavior as the {product-title} service is validating your AWS account configuration.
