Open Markchau opened 11 months ago
Hi @Markchau, we are having the same issue!
were you able to resolve it?
hi @Markchau and @lpm0073 ! i found a work-around this! you need to create bastion user in order to kms policy well formatted.
you can do this with aws cli
aws iam create-user --user-name ${local.namespace}-bastion --path /system/bastion-user/
change ${local.namespace}
with your real name space.
after that bastion module will fail because user already exists.
im working to solve it , will send a pr soon, this will solve both problems
great solution. thank you!
Describe the bug When I try to run
terragrunt apply
on theopenedx_devops/terraform/stacks/service/kubernetes
, I encounter theMalformedPolicyDocumentException
on creating the KMS key, this is the following error:Workflow This the full workflow on running the terraform & terragrunt command:
Getting the above error on the last step of commands. I didn't add any new IAM user as owner with admin permission in the
kms_key_owners
list andmap_users
list in theterraform/stacks/service/kubernetes/terragrunt.hcl
files on first trial, just using default setting of including the IAM user for the bastion server inside these two list. Then this error happened. On the second trial, I try to add a new IAM user with admin permission but the same error occurred again.Expected behavior The error above does not occur.
Additional context It will be a great gratitude if you can help me on resolving this issue. Thank you for your time to work on this.