Uploaded image for project: 'CPE Infrastructure'
  1. CPE Infrastructure
  2. CPE-2776

Add StartInstanceRefresh permission for fedora-ci-testing-farm user in AWS

XMLWordPrintable

    • 1
    • False
    • None
    • False
    • Testable

      https://pagure.io/fedora-infrastructure/issue/12345

      1. Describe what you would like us to do:

        We need to add start instance refresh after updating the tags after the ASG is created:

      An error occurred (AccessDenied) when calling the StartInstanceRefresh
      │ operation: User: arn:aws:iam::125523088429:user/fedora-ci-testing-farm is
      │ not authorized to perform: autoscaling:StartInstanceRefresh on resource:
      │ arn:aws:autoscaling:us-east-2:125523088429:autoScalingGroup:1ea95a62-2274-4466-8f86-a3b800d2ef31:autoScalingGroupName/eks-default_node_group-20250103143008332600000003-b0ca1649-6b80-2b0c-1c29-156db1b05b83
      │ because no identity-based policy allows the
      │ autoscaling:StartInstanceRefresh action

      1. When do you need this to be done by?

        Ideally ASAP, it is blocking proper tagging of instances created for the cluster. See:

      https://gitlab.com/testing-farm/infrastructure/-/merge_requests/781

              dkirwan David Kirwan
              rh-ee-mkonecny Michal Konecny
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated: