blobs is private - Githubissues

jhunt / k8s-boshrelease

A BOSH Release for deploying Kubernetes clusters

MIT License

13 stars 9 forks source link

blobs is private #56

Closed obeyler closed 4 years ago

obeyler commented 4 years ago

Blob download 'containerd/containerd-1.3.5-linux-amd64.tar.gz' (id: 742cb1fa-2f84-4665-4d82-884886227d3c) failed

Getting blob '742cb1fa-2f84-4665-4d82-884886227d3c' for path 'containerd/containerd-1.3.5-linux-amd64.tar.gz': Getting blob from inner blobstore: Getting blob from inner blobstore: AccessDenied: Access Denied status code: 403, request id: 784F91B43B9FA398, host id: EAfthPNGLY4THuXdcRqZMXe0Z7E1d2CBQNyBSAJw08wC2BI+oRqfhpQnOVklB2hyduZ3TSIAMko=

obeyler commented 4 years ago

/assign @jhunt

jhunt commented 4 years ago

I re-chacled all the blobs in the bucket, and set the following default bucket policy:

{
    "Version": "2008-10-17",
    "Statement": [
        {
            "Sid": "AddPerm",
            "Effect": "Allow",
            "Principal": {
                "AWS": "*"
            },
            "Action": "s3:GetObject",
            "Resource": "arn:aws:s3:::k8s-boshrelease/*"
        }
    ]
}

which should prevent this from happening in the future.