search

amazon-archives / aws-service-operator

AWS Service Operator allows you to create AWS resources using kubectl.
Apache License 2.0
732 stars 97 forks source link

s3 access disabled while creating dynamodb #212

Open nomis-rzp opened 5 years ago

nomis-rzp commented 5 years ago

While creating dynamodb table im getting the following error:

time="2019-09-27T07:44:19Z" level=error msg="error getting cloudformation template returning fallback template" error="cloudformationtemplates.service-operator.aws \"dynamodb\" not found" hostname=aws-service-operator-68b6cd8b59-bks8c
time="2019-09-27T07:44:21Z" level=error msg="error creating dynamodb 'example-table-name'" error="ValidationError: S3 error: All access to this object has been disabled\nFor more information check http://docs.aws.amazon.com/AmazonS3/latest/API/ErrorResponses.html\n\tstatus code: 400,  hostname=aws-service-operator-68b6cd8b59-bks8c

The node where the pod aws-service-operator runs has complete access to s3 . Has anyone seen this issue ? Can someone please help.

nomis-rzp commented 5 years ago

I have corrected the namespace where it can find the cloudformation template. Now i get an access denied error

time="2019-09-30T06:23:30Z" level=error msg="error creating dynamodb 'example-table-name'" error="ValidationError: S3 error: Access Denied\nFor more information check http://docs.aws.amazon.com/AmazonS3/latest/API/ErrorResponses.html\n\tstatus code: 400, " hostname=aws-service-operator-7cb584b555-bbg2q**

Again the aws-service-operator pods has access to the bucket im using. I have checked this by listing the bucket from inside the pod.