I've been using `iam.RolePolicyAttachment` since y...
# awsq
quaint-electrician-41503
10/14/2020, 5:25 AMI've been using
iam.RolePolicyAttachmentiam.Policyiam.RolePolicyAttachmentg
gentle-diamond-70147
10/14/2020, 5:33 AMCan you share your full code that reproduces this?
q
quaint-electrician-41503
10/14/2020, 5:50 AMI can't but I can try to summarize.
quaint-electrician-41503
10/14/2020, 5:51 AMkmsKeyPolicy=aws.iam.Policy(... policy=kms_key.arn.apply(lambda: arn)....)
quaint-electrician-41503
10/14/2020, 5:57 AMkms_attached_policy = aws.iam.RolePolicyAttachment(...,policy_arn=kmsKeyPolicy.arn, role=node_instance_role_arn.apply=(lambda: arn: aws.get_arn(arn).resource[5:]) ,)
quaint-electrician-41503
10/14/2020, 5:59 AMI can export kms_attached_policy and I see id, policy_arn, role, urn output in terminal
quaint-electrician-41503
10/14/2020, 6:00 AMIf I look in aws console I do not see the policy attached, for the same role listed in output that was exported
quaint-electrician-41503
10/14/2020, 6:01 AMFinally it seemed to work yesterday so I am feeling nutty
quaint-electrician-41503
10/14/2020, 6:01 AMabout to roll my git back to that commit.
quaint-electrician-41503
10/14/2020, 6:02 AMBut using the RolePolicyAttachment is working for a managed arn
quaint-electrician-41503
10/14/2020, 6:17 AMYesterday's code shares the same methods
quaint-electrician-41503
10/14/2020, 6:18 AMI rolled back git to see if I made myself believe something didn't happen
quaint-electrician-41503
10/14/2020, 6:24 AMI rolled back. It did not work. But it really seemed like I made this work yesterday. I am able to attach aws managed policies, just not my own policy.
quaint-electrician-41503
10/14/2020, 6:25 AMAfter getting it to work as above I copied links to the attached policies and the git commit
quaint-electrician-41503
10/14/2020, 6:25 AMFinally why does pulumi export the values and show it as created if it's not being attached?
quaint-electrician-41503
10/14/2020, 6:31 AMIs there any policy that could have been applied that will not allow me to add my custom policy to a role?
quaint-electrician-41503
10/14/2020, 6:34 AMCan I use the output to trace the supposedly attached event that's not showing up in my console?
quaint-electrician-41503
10/14/2020, 7:14 AMI deleted the stack and reapplied and policy attached to the role. I don't understand what is going on.
quaint-electrician-41503
10/14/2020, 7:48 AMrolled back to my other stack. now I see two of 3 attempted policies attached. seems like a bug or a limitation i don't understand
c
cool-fireman-90027
10/14/2020, 1:22 PMIf you run this:
pulumi up --logtostderr -v9 --debugq
quaint-electrician-41503
10/14/2020, 4:14 PMThat's a good idea. I am trying to create a few role policy attachments. Then is it possible that the future didn't complete before trying to attach the role to the node?
quaint-electrician-41503
10/14/2020, 4:53 PMCan we manually mark dependencies in the job graph to ensure it's rendered properly?