steep-secretary-65224
11/07/2024, 7:45 PMus-east-1
. i added a second stack to use aws:region: eu-central-2
and then the preview fails with
Diagnostics:
pulumi:pulumi:Stack (networking-xxx-stg.eu-central-2):
error: awsx:ec2:Vpc resource 'xxx' has a problem: grpc: the client connection is closing
pulumi:providers:aws (default_6_47_0):
error: pulumi:providers:aws resource 'default_6_47_0' has a problem: Invalid credentials configured.
so here's the fun part. i set AWS_REGION=eu-central-2
for that stack and it worked. looking into the cloudtrail logs, it looks the one that failed was issued an access key from us-east-1
. the one that succeeded was issued from eu-central-2
. this leads me to believe that the ENV var is influencing whatever you run initially to do the AssumeRoleWithWebIdentity
(from the deployment logs, it looks like its calling pulumi-deploy-executor oidc ...
)
considering this isn't documented anywhere when talking about configuring the regions, i'm assuming this is not expected?steep-secretary-65224
11/07/2024, 7:46 PMDENY if resource.region != token.region
steep-secretary-65224
11/07/2024, 7:51 PMaws:config
value in any wayNo matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.
Powered by