Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Engineers should be able to assume CI roles #1262

Open
blampe opened this issue Jan 3, 2025 · 1 comment
Open

Engineers should be able to assume CI roles #1262

blampe opened this issue Jan 3, 2025 · 1 comment
Labels
kind/engineering Work that is not visible to an external user

Comments

@blampe
Copy link
Contributor

blampe commented Jan 3, 2025 •
edited
Loading

We already have admin access to these accounts, so we should also be able to assume the same role used by CI. This would make it possible to run tests locally in exactly the same way we run them on CI.

AWS currently only allows root to assume it.

arn:aws:iam::894850187425:role/ContinuousDeliveryAdminRole

GCP seems to have a similar issue.

https://pulumi.slack.com/archives/C02FXTZEZ6W/p1734737163616869?thread_ts=1734729538.329619&cid=C02FXTZEZ6W
@pulumi-bot pulumi-bot added the needs-triage Needs attention from the triage team label Jan 3, 2025
@blampe blampe mentioned this issue Jan 3, 2025
Merged
@blampe
Copy link
Contributor Author

blampe commented Jan 3, 2025

@flostadler traced AWS down to https://github.com/pulumi/home/blob/6d98acbc91c4cc4deea122a18cb0503b41354b3a/aws/accounts/pulumi-ci.ts#L39

@guineveresaenger guineveresaenger removed the needs-triage Needs attention from the triage team label Jan 3, 2025
@blampe blampe mentioned this issue Jan 3, 2025
Open
@iwahbe iwahbe added the kind/engineering Work that is not visible to an external user label Jan 10, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
kind/engineering Work that is not visible to an external user
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
4 participants
@blampe @guineveresaenger @iwahbe @pulumi-bot