rstudio / rstudio/helm

AWS S3 credentials access denied

Open
#159 1 comment 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

security team: package manager
Dominant language
Markdown
Stars
46
Forks
40
Avg merge
4h 3m
Merged PRs (30d)
6

Description

Hello.

When I try to deploy with the following values:

  values:
    pod:
      env:
        - name: AWS_REGION
          value: us-east-2
        - name: AWS_DEFAULT_REGION
          value: us-east-2
    license:
      key: ##########################
    service:
      type: LoadBalancer
      port: 80
      targetPort: 4242
    awsAccessKeyId: ##########################
    awsSecretAccessKey: ##########################
    config:
      Storage:
        Default: s3
      S3Storage:
        Bucket: rstudio-pm-manual-test

I'm getting the following error:

2022/02/18 18:16:37 Error running services: Error validating S3 session for 'cache': Something went wrong uploading to S3. You may want to check your configuration, error: AccessDenied: Access Denied
        status code: 403, request id: ##########################, host id: ##########################

I checked the secret. It seems fine:

kubectl get secrets rstudio-pm-aws-creds -o yaml
apiVersion: v1
data:
  credentials: ##########################
kind: Secret
metadata:
  annotations:
    meta.helm.sh/release-name: rstudio-pm
    meta.helm.sh/release-namespace: rstudio-pm
  creationTimestamp: "2022-02-18T18:16:26Z"
  labels:
    app.kubernetes.io/managed-by: Helm
    helm.toolkit.fluxcd.io/name: rstudio-pm
    helm.toolkit.fluxcd.io/namespace: rstudio-pm
    manager: helm-controller
    operation: Update
    time: "2022-02-18T18:16:26Z"
  name: rstudio-pm-aws-creds
  namespace: rstudio-pm
  resourceVersion: "783162"
  uid: 26f80151-eb54-417f-af05-a1cdabf92983
type: Opaque
$ echo ##########################|  base64 -d
[default] 
aws_access_key_id=##########################
aws_secret_access_key=##########################

Could you help me?

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start with the Helm deployment values and the rstudio-pm-aws-creds Kubernetes Secret shown in the report, then review the S3 session validation error and its 403 response. Confirm the configured AWS credentials have the required access to the rstudio-pm-manual-test bucket; done means deployment completes without the cache S3 validation error.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws, helm, kubernetes
Domain
cloud, devops
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.