Skip to content

AwsCredentials.fromGitHubSecrets is not working #1122

@gyalai-aws

Description

@gyalai-aws

I've created a simple pipeline with a single stage and included a stack that required some assets to be upload.

The Publish Assets step has failed with the following error:

npx cdk-assets --path cdk.out/assembly-DEV/DEVgithubtestComplianceLogBucketStackF5F521E7.assets.json --verbose publish 0af827d6ad193f718e61cfbca3d058c1ef178607ee4fed500290c42de72be137:218461131457-eu-central-1
verbose: Loaded manifest from cdk.out/assembly-DEV/DEVgithubtestComplianceLogBucketStackF5F521E7.assets.json: 3 assets found
verbose: Applied selection: 1 assets selected.
info   : [0%] start: Publishing 0af827d6ad193f718e61cfbca3d058c1ef178607ee4fed500290c42de72be137:21846[11](https://github.com/gyalai-aws/github-cicd-wrapper/actions/runs/11013717640/job/30582803734#step:5:12)31457-eu-central-1
verbose: [0%] check: Check s3://cdk-hnb659fds-assets-218461131457-eu-central-1/0af827d6ad193f718e61cfbca3d058c1ef178607ee4fed500290c42de72be137.json
error  : [100%] fail: Missing credentials in config, if using AWS_CONFIG_FILE, set AWS_SDK_LOAD_CONFIG=1
Failure: CredentialsError: Missing credentials in config, if using AWS_CONFIG_FILE, set AWS_SDK_LOAD_CONFIG=1
    at Request.extractError (/home/runner/work/github-cicd-wrapper/github-cicd-wrapper/node_modules/cdk-assets/node_modules/aws-sdk/lib/protocol/query.js:50:29)
    at Request.callListeners (/home/runner/work/github-cicd-wrapper/github-cicd-wrapper/node_modules/cdk-assets/node_modules/aws-sdk/lib/sequential_executor.js:106:20)
    at Request.emit (/home/runner/work/github-cicd-wrapper/github-cicd-wrapper/node_modules/cdk-assets/node_modules/aws-sdk/lib/sequential_executor.js:78:10)
    at Request.emit (/home/runner/work/github-cicd-wrapper/github-cicd-wrapper/node_modules/cdk-assets/node_modules/aws-sdk/lib/request.js:686:14)
    at Request.transition (/home/runner/work/github-cicd-wrapper/github-cicd-wrapper/node_modules/cdk-assets/node_modules/aws-sdk/lib/request.js:22:10)
    at AcceptorStateMachine.runTo (/home/runner/work/github-cicd-wrapper/github-cicd-wrapper/node_modules/cdk-assets/node_modules/aws-sdk/lib/state_machine.js:14:[12](https://github.com/gyalai-aws/github-cicd-wrapper/actions/runs/11013717640/job/30582803734#step:5:13))
    at /home/runner/work/github-cicd-wrapper/github-cicd-wrapper/node_modules/cdk-assets/node_modules/aws-sdk/lib/state_machine.js:26:10
    at Request.<anonymous> (/home/runner/work/github-cicd-wrapper/github-cicd-wrapper/node_modules/cdk-assets/node_modules/aws-sdk/lib/request.js:38:9)
    at Request.<anonymous> (/home/runner/work/github-cicd-wrapper/github-cicd-wrapper/node_modules/cdk-assets/node_modules/aws-sdk/lib/request.js:688:12)
    at Request.callListeners (/home/runner/work/github-cicd-wrapper/github-cicd-wrapper/node_modules/cdk-assets/node_modules/aws-sdk/lib/sequential_executor.js:1[16](https://github.com/gyalai-aws/github-cicd-wrapper/actions/runs/11013717640/job/30582803734#step:5:17):18)

The secrets are configured properly, and when I'm replaced the cdk-assets publish command with the aws sts get-caller-identity I've recieved the correct AWS identity.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions