[JIRA] (JENKINS-48096) EC2 plugin does not obtain new credentials based on IAM role each time it launch a new slave instance

[jamieschuts@protonmail.com (JIRA)]

pete barnes commented on JENKINS-48096

Re: EC2 plugin does not obtain new credentials based on IAM role each time it launch a new slave instance Francis Upton any plans to close out this issue? it's a blocker for us. Only way we can seem to get it to work is to keep saving the credentials manually (which forces a refresh). However it means we can't use it for automation. Thanks! Add Comment

This message was sent by Atlassian Jira (v7.11.2#711002-sha1:fdc329d)

[ben.copeland@menlosecurity.com (JIRA)]

Ben Copeland commented on JENKINS-48096

Re: EC2 plugin does not obtain new credentials based on IAM role each time it launch a new slave instance

This is an issue with us as well. Almost verbatim the same symptoms as described above. I have confirmed with AWS support this is indeed a session timeout. The plugin does not re-auth and refresh the session. Maybe a session refresh interval as a configuration option or something along those lines.

Add Comment

[ben.copeland@menlosecurity.com (JIRA)]

Ben Copeland updated an issue

Jenkins / JENKINS-48096

EC2 plugin does not obtain new credentials based on IAM role each time it launch a new slave instance

Change By: Ben Copeland Issue Type: Improvement Bug

Add Comment

[ben.copeland@menlosecurity.com (JIRA)]

Ben Copeland commented on JENKINS-48096

Re: EC2 plugin does not obtain new credentials based on IAM role each time it launch a new slave instance After looking closer this seems to be a bug. Was this not "fixed" with issues like JENKINS-36516  I confirmed with AWS support after looking through the session logs the session is in fact expiring and the plug-in is failing to refresh.

Add Comment

[ben.copeland@menlosecurity.com (JIRA)]

Ben Copeland commented on JENKINS-48096

Re: EC2 plugin does not obtain new credentials based on IAM role each time it launch a new slave instance

Regression from JENKINS-26854 ?

Add Comment

[raihaan.shouhell@autodesk.com (JIRA)]

Raihaan Shouhell resolved as Fixed

The session auto refreshes if expired now

Jenkins / JENKINS-48096

EC2 plugin does not obtain new credentials based on IAM role each time it launch a new slave instance

Change By: Raihaan Shouhell Status: Open Resolved Resolution: Fixed

Add Comment

[rsandell@cloudbees.com (JIRA)]

rsandell commented on JENKINS-48096

Re: EC2 plugin does not obtain new credentials based on IAM role each time it launch a new slave instance Any insight into what was fixed in 1.44 that fixed this issue? I'm investigating if it is possible to backport the fix into the 1.42 line.

Add Comment

[raihaan.shouhell@autodesk.com (JIRA)]

Raihaan Shouhell commented on JENKINS-48096

Re: EC2 plugin does not obtain new credentials based on IAM role each time it launch a new slave instance

This shouldn't be too hard to backport. https://github.com/jenkinsci/ec2-plugin/pull/378 is the current implementation of checking if creds are ok and refreshing them

Add Comment