search

cdklabs / cdk-pipelines-github

Apache License 2.0
349 stars 37 forks source link

AwsCredentials.fromGitHubSecrets is not working #1122

Open gyalai-aws opened 2 months ago

gyalai-aws commented 2 months ago

I've created a simple pipeline with a single stage and included a stack that required some assets to be upload.

The Publish Assets step has failed with the following error:

npx cdk-assets --path cdk.out/assembly-DEV/DEVgithubtestComplianceLogBucketStackF5F521E7.assets.json --verbose publish 0af827d6ad193f718e61cfbca3d058c1ef178607ee4fed500290c42de72be137:218461131457-eu-central-1
verbose: Loaded manifest from cdk.out/assembly-DEV/DEVgithubtestComplianceLogBucketStackF5F521E7.assets.json: 3 assets found
verbose: Applied selection: 1 assets selected.
info   : [0%] start: Publishing 0af827d6ad193f718e61cfbca3d058c1ef178607ee4fed500290c42de72be137:21846[11](https://github.com/gyalai-aws/github-cicd-wrapper/actions/runs/11013717640/job/30582803734#step:5:12)31457-eu-central-1
verbose: [0%] check: Check s3://cdk-hnb659fds-assets-218461131457-eu-central-1/0af827d6ad193f718e61cfbca3d058c1ef178607ee4fed500290c42de72be137.json
error  : [100%] fail: Missing credentials in config, if using AWS_CONFIG_FILE, set AWS_SDK_LOAD_CONFIG=1
Failure: CredentialsError: Missing credentials in config, if using AWS_CONFIG_FILE, set AWS_SDK_LOAD_CONFIG=1
    at Request.extractError (/home/runner/work/github-cicd-wrapper/github-cicd-wrapper/node_modules/cdk-assets/node_modules/aws-sdk/lib/protocol/query.js:50:29)
    at Request.callListeners (/home/runner/work/github-cicd-wrapper/github-cicd-wrapper/node_modules/cdk-assets/node_modules/aws-sdk/lib/sequential_executor.js:106:20)
    at Request.emit (/home/runner/work/github-cicd-wrapper/github-cicd-wrapper/node_modules/cdk-assets/node_modules/aws-sdk/lib/sequential_executor.js:78:10)
    at Request.emit (/home/runner/work/github-cicd-wrapper/github-cicd-wrapper/node_modules/cdk-assets/node_modules/aws-sdk/lib/request.js:686:14)
    at Request.transition (/home/runner/work/github-cicd-wrapper/github-cicd-wrapper/node_modules/cdk-assets/node_modules/aws-sdk/lib/request.js:22:10)
    at AcceptorStateMachine.runTo (/home/runner/work/github-cicd-wrapper/github-cicd-wrapper/node_modules/cdk-assets/node_modules/aws-sdk/lib/state_machine.js:14:[12](https://github.com/gyalai-aws/github-cicd-wrapper/actions/runs/11013717640/job/30582803734#step:5:13))
    at /home/runner/work/github-cicd-wrapper/github-cicd-wrapper/node_modules/cdk-assets/node_modules/aws-sdk/lib/state_machine.js:26:10
    at Request.<anonymous> (/home/runner/work/github-cicd-wrapper/github-cicd-wrapper/node_modules/cdk-assets/node_modules/aws-sdk/lib/request.js:38:9)
    at Request.<anonymous> (/home/runner/work/github-cicd-wrapper/github-cicd-wrapper/node_modules/cdk-assets/node_modules/aws-sdk/lib/request.js:688:12)
    at Request.callListeners (/home/runner/work/github-cicd-wrapper/github-cicd-wrapper/node_modules/cdk-assets/node_modules/aws-sdk/lib/sequential_executor.js:1[16](https://github.com/gyalai-aws/github-cicd-wrapper/actions/runs/11013717640/job/30582803734#step:5:17):18)

The secrets are configured properly, and when I'm replaced the cdk-assets publish command with the aws sts get-caller-identity I've recieved the correct AWS identity.