Skip to content
This repository has been archived by the owner on Jan 8, 2024. It is now read-only.

Adding new required policies to ecs odr #4296

Merged
merged 2 commits into from
Dec 9, 2022
Merged

Conversation

izaaklauer
Copy link
Contributor

@izaaklauer izaaklauer commented Dec 9, 2022

Without these, we can't do StopTask or WatchTask jobs with remote runners.

You get these errors:

 rpc error: code = Unknown desc = AccessDeniedException: User: arn:aws:sts::<account-id>:assumed-role/waypoint-runner/<id> is not authorized to perform: logs:GetLogEvents on resource: arn:aws:logs:us-east-1:<account-id>:log-group:waypoint-runner-logs:log-stream:waypoint-odr-task-<id>/waypoint-odr-task-<id>/<id> because no identity-based policy allows the logs:GetLogEvents action
2022-12-09T01:40:30.519Z [WARN]  waypoint.runner.agent.runner: error during job execution: job_id=01GKT8JC6X60X4ZFEET2C6AJEA job_op=*gen.Job_StopTask err="rpc error: code = Unknown desc = AccessDeniedException: User: arn:aws:sts::<account-id>:assumed-role/waypoint-runner/<id> is not authorized to perform: ecs:StopTask on resource: arn:aws:ecs:us-east-1:<account-id>:task/hcp-wp-integration/<id> because no identity-based policy allows the ecs:StopTask action"

thanks to @andrew-hashicorp for pairing on running these down!

Without these, we can't do StopTask or WatchTask jobs with remote runners.
@github-actions github-actions bot added the core label Dec 9, 2022
Copy link
Member

@briancain briancain left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think we document these too, should we update the website?

@briancain
Copy link
Member

This could use a changelog I think too!

Copy link
Contributor

@paladin-devops paladin-devops left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

+1 to changelog! I could not find where on the website this is documented, but I think it would be great to be added to the additional runners page.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants