Skip to content

Allow users with different admin AWS credentials to run cortex cluster commands #1316

Open
@deliahu

Description

@deliahu

Currently, if you install the CLI on a new machine and use different AWS credentials (with the AdministratorAccess IAM policy attached), running cortex cluster commands will not work. We link to a cortex docs page with instructions on how to address this (implemented in #1392):

error: your aws iam user does not have access to this cluster; to grant access, see https://docs.cortex.dev/v/master/miscellaneous/security#running-cortex-cluster-commands-from-different-iam-users

It would be better if it just works out of the box (assuming that the new IAM user also has the AdministratorAccess IAM policy).

Relevant info:

Possible solution:

  • Assume the role of an IAM Role that has access to the cluster. There may already be one created (there is a role visible on the EKS console titled "Cluster IAM Role ARN"), or we may have to create one and grant access to it during cluster spin up.

Metadata

Metadata

Assignees

No one assigned

    Labels

    researchDetermine technical constraints

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions