mozilla / security

Repository for various tools around security
Mozilla Public License 2.0
42 stars 24 forks source link

OIDC Identity Provider CloudFormation custom resource error on update #50

Closed gene1wood closed 4 years ago

gene1wood commented 4 years ago

https://github.com/mozilla/security/tree/master/operations/cloudformation-templates/oidc_identity_provider

OIDC Identity Provider CloudFormation custom resource doesn't handle an update where the thumbprint list is changed failing with this error

Also, we need to change from the vendored requests to something else

2019-12-23 10:27:24 UTC-0800    OIDCIdentityProvider    
UPDATE_ROLLBACK_FAILED  The following resource(s) failed to update: [IdentityProvider].
2019-12-23 10:27:24 UTC-0800    IdentityProvider    
UPDATE_FAILED   Failed to update resource. An error occurred (EntityAlreadyExists) when calling the CreateOpenIDConnectProvider operation: Unknown
2019-12-23 10:27:22 UTC-0800    IdentityProvider    
UPDATE_IN_PROGRESS  -
2019-12-23 10:27:04 UTC-0800    OIDCIdentityProvider    
UPDATE_ROLLBACK_IN_PROGRESS The following resource(s) failed to update: [IdentityProvider].
2019-12-23 10:27:03 UTC-0800    IdentityProvider    
UPDATE_FAILED   Failed to update resource. An error occurred (EntityAlreadyExists) when calling the CreateOpenIDConnectProvider operation: Unknown
gene1wood commented 4 years ago

I was mistaken, we're not using the vendored requests from boto