search

department-of-veterans-affairs / va.gov-team

Public resources for building on and in support of VA.gov. Visit complete Knowledge Hub:
https://depo-platform-documentation.scrollhelp.site/index.html
284 stars 206 forks source link

The `ves-oracle-export` repository started failing on Wednes... #98015

Closed platform-support-slack-integration[bot] closed 2 days ago

platform-support-slack-integration[bot] commented 2 days ago

Submitted By: mitch.saltykov Topic: CI Error Team: Tier 1 Support

The ves-oracle-export repository started failing on Wednesday, without any changes committed in months. Looks like an AWS authorization issue of some sort getting the credentials it uses?

https://github.com/department-of-veterans-affairs/ves-oracle-export/actions/runs/12074856599

User: arn:aws-us-gov:sts::008577686731:assumed-role/ves-gha-oidc-role/GitHubActions is not authorized to perform: ssm:GetParameter on resource: arn:aws-us-gov:ssm:us-gov-west-1:008577686731:parameter/vets-api/income-limits/ves_db_username because no identity-based policy allows the ssm:GetParameter action

This repo has been using the same credentials that the vets-api Income Limits data sync script references (https://github.com/department-of-veterans-affairs/vets-api/blob/master/.github/scripts/income-limits-data-sync.rb) - could that be the problem? Do we need to add our own credentials for this repo?

platform-support-slack-integration[bot] commented 2 days ago

Slack Thread Link: https://dsva.slack.com/archives/CBU0KDSB1/p1732889583094929