Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Bug]: S3 Storage Provisioning Permissions Error #1229

Open
dnraitzyk opened this issue Jan 17, 2025 · 1 comment
Open

[Bug]: S3 Storage Provisioning Permissions Error #1229

dnraitzyk opened this issue Jan 17, 2025 · 1 comment
Labels
bug Something isn't working

Comments

@dnraitzyk
Copy link

Installation method

Own AWS account

What happened?

While running command "prepare-environment fundamentals/storage/s3", there is an IAM permissions error that "The role with name eks-workshop-ide-role cannot be found" . This prevents doing the S3 portion of the lab. Screenshot included.

Image

What did you expect to happen?

The S3 storage resources to provision without error.

How can we reproduce it?

Run command "prepare-environment fundamentals/storage/s3".

Anything else we need to know?

No response

EKS version

1.30

@dnraitzyk dnraitzyk added the bug Something isn't working label Jan 17, 2025
@MalcolmFeatonby
Copy link

MalcolmFeatonby commented Jan 18, 2025

There is a fix for this here: #1227

This is currently merged into main branch but hasn't yet made it to stable which is likely what you are running on.

As a near term work around what unblocked me was to set the $REPOSITORY_REF env variable to point at the main branch

export REPOSITORY_REF=main

and then run the prepare-environment again.

ec2-user:~/environment:$ prepare-environment fundamentals/storage/s3
Refreshing copy of workshop repository from GitHub...

Resetting the environment...
Tip: Read the rest of the lab introduction while you wait!
Deleting assets-images folder...
Scaling down assets deployment...
Deleting PV and PVC that were created...
Waiting for application to become ready...
Cleaning up previous lab infrastructure...
Creating infrastructure for next lab...
Environment is ready

I also updated this policy 'eks-workshop-ide-labs2' to add the s3:PutObject permission as follows:

	{
			"Action": [
				"s3:CreateBucket",
				"s3:DeleteBucket",
				"s3:List*",
				"s3:Get*",
				"s3:PutBucketPublicAccessBlock",
				"s3:PutBucketTagging",
				"s3:DeleteObject",
				"s3:DeleteObjectVersion",
				"s3:PutObject"
			],
			"Resource": [
				"arn:aws:s3:::eks-workshop*",
				"arn:aws:s3:::eks-workshop*/*"
			],
			"Effect": "Allow"
		},

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
Status: No status
Development

No branches or pull requests

2 participants