Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Backport of chore(e2e): Add GetUserPolicy permission to service user into release/0.14.x #3878

Conversation

hc-github-team-secure-boundary
Copy link
Collaborator

Backport

This PR is auto-generated from #3877 to be assessed for backporting due to the inclusion of the label backport/0.14.x.

The below text is copied from the body of the original PR.


This PR updates the permissions for the AWS user used in CI to include iam:GetUserPolicy. We started seeing failures last night due to...

Error: waiting for IAM User Policy (boundary-e2e-EMvkM:boundary_e2e_EMvkM) create: AccessDenied: User: arn:aws:sts::173905499206:assumed-role/github_actions-boundary_enterprise_ci/GitHubActions is not authorized to perform: iam:GetUserPolicy on resource: user boundary-e2e-EMvkM because no identity-based policy allows the iam:GetUserPolicy action
	status code: 403, request id: 6b2f6782-c305-4d22-bdb4-f4bf8c0148e1

  with module.iam_setup.aws_iam_user_policy.boundary,
  on ../../modules/aws_iam_setup/main.tf line 20, in resource "aws_iam_user_policy" "boundary":
  20: resource "aws_iam_user_policy" "boundary" {
  Validate: success!
  Plan: success!

I've already applied the changes to the user and the failures have been resolved. This PR is just checking the terraform changes.

@hc-github-team-secure-boundary hc-github-team-secure-boundary merged commit b03e40c into release/0.14.x Oct 20, 2023
@hc-github-team-secure-boundary hc-github-team-secure-boundary force-pushed the backport/moduli-e2e-getuserpolicy/violently-ideal-oyster branch from 3b4370e to 8dd8411 Compare October 20, 2023 19:12
@hc-github-team-secure-boundary hc-github-team-secure-boundary deleted the backport/moduli-e2e-getuserpolicy/violently-ideal-oyster branch October 20, 2023 19:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant