Closed liorfranko closed 2 years ago
Can you check cloudtrail?
configuration looks great but your issue is more setup related with IRSA/ serviceAccount because the serviceAccount is not allowed to assumeRoleWithWebidentity ...
Sorry, it was my bad, I was using the wrong ProviderConfig.
What happened?
I'm trying to use the
assumeRoleARN
inProviderConfig
but it doesn't work. I followed the guide https://github.com/crossplane-contrib/provider-jet-aws/blob/main/AUTHENTICATION.mdI created a role in AWS, and mapped it to the correct SA in the correct namespace (provider-jet-aws-302696b1dbdb).
I'm getting the following errors:
api error AccessDenied: Not authorized to perform sts:AssumeRoleWithWebIdentity
How can we reproduce it?
Create the IAM with trust policy
What environment did it happen in?
Crossplane version: