This message was deleted.

sparse-intern-71089

04/27/2022, 10:30 PM

This message was deleted.

billowy-army-68599

04/27/2022, 10:31 PM

how are you configured aws access in github? does

aws sts get-caller-identity

work? is it a self hosted runner?

green-daybreak-91402

04/27/2022, 10:35 PM

We are using the pulumi GH Action:

Copy code

- uses: <docker://pulumi/actions>
        with:
          args: preview
        env:
          PULUMI_CI: pr
          PULUMI_ROOT: infra
          PULUMI_ACCESS_TOKEN: ${{ secrets.PULUMI_ACCESS_TOKEN }}
          AWS_ACCESS_KEY_ID: ${{ env.AWS_ACCESS_KEY_ID }}
          AWS_SECRET_ACCESS_KEY: ${{ env.AWS_SECRET_ACCESS_KEY }}

and in previous steps we are setting teh env variable values from GH secrets

green-daybreak-91402

04/27/2022, 10:36 PM

this is a normal GH hosted runner

billowy-army-68599

04/27/2022, 10:36 PM

before you run that, can you run

aws sts get-caller-identity

billowy-army-68599

04/27/2022, 10:37 PM

shouldn't this be...

Copy code

AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}

billowy-army-68599

04/27/2022, 10:37 PM

instead of

${{ env.AWS_ACCESS_KEY_ID }}

green-daybreak-91402

04/27/2022, 10:38 PM

good eye, but we are conditionally setting those depending on the branch so they ultimately come from

env.

green-daybreak-91402

04/27/2022, 10:39 PM

im going to test

aws sts get-caller-identity

high-morning-17948

04/27/2022, 10:53 PM

@billowy-army-68599 if we didn't change anything in the deployment config, what could trigger this error:

Copy code

pulumi:pulumi:Stack hyperion-api-dev running error: Error: invocation of aws:iam/getAccountAlias:getAccountAlias returned an error: 1 error occurred:

billowy-army-68599

04/27/2022, 11:09 PM

I have never seen that error...

billowy-army-68599

04/27/2022, 11:09 PM

your AWS credentials don't seem to be valid: https://github.com/pulumi/pulumi/issues/1363

green-daybreak-91402

04/27/2022, 11:24 PM

we’re trying now with the latest Pulumi GH Action:

Copy code

uses: pulumi/actions@v3

we were previously using:

Copy code

uses: <docker://pulumi/actions>

green-daybreak-91402

04/27/2022, 11:54 PM

The issue seems to be related to using the latest Pulumi package versions:

Copy code

"@pulumi/aws": "^5.3.0",
    "@pulumi/awsx": "^0.40.0",
    "@pulumi/pulumi": "^3.30.0",
    "@pulumi/random": "^4.5.0",

we reverted and it works as before…

billowy-army-68599

04/27/2022, 11:55 PM

interesting, can you file an issue?

👍 1

green-daybreak-91402

04/27/2022, 11:56 PM

Yup, I created one in the pulumi/actions repo

billowy-army-68599

04/27/2022, 11:57 PM

can you send a link? needs to be in pulumi-aws

green-daybreak-91402

04/27/2022, 11:59 PM

sure: https://github.com/pulumi/actions/issues/592

6 Views

Open in Slack

Previous Next

Pulumi Community

No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.