Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Could not assume role with OIDC: Not authorized to perform sts:AssumeRoleWithWebIdentity #1100

Closed
JarvisPrestidge opened this issue Jun 30, 2024 · 2 comments
Labels
bug Something isn't working needs-triage This issue still needs to be triaged

Comments

@JarvisPrestidge
Copy link

Describe the bug

Failed to assume role with a meticulously following OIDC setup:

Assuming role with OIDC
Error: Could not assume role with OIDC: Not authorized to perform sts:AssumeRoleWithWebIdentity

Expected Behavior

For the role to assume successfully.

Current Behavior

An error during the action:

Assuming role with OIDC
Error: Could not assume role with OIDC: Not authorized to perform sts:AssumeRoleWithWebIdentity

Reproduction Steps

In the trust policy for the role, for the field: token.actions.githubusercontent.com:sub add a incorrectly cased organisation value.

For example:

repo:jarvisprestidge/repo-name...

instead of:

repo:JarvisPrestidge/repo-name...

Possible Solution

Fix the casing for the organisation / github account name.

Additional Information/Context

This caused me hours of pain, i'm just hoping someone with the same issue finds this issue.

@JarvisPrestidge JarvisPrestidge added bug Something isn't working needs-triage This issue still needs to be triaged labels Jun 30, 2024
@JarvisPrestidge
Copy link
Author

I'm posting and closing purely to document the fix, as this is an issue that others are bound to run into.

Copy link

Comments on closed issues are hard for our team to see.
If you need more assistance, please either tag a team member or open a new issue that references this one.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working needs-triage This issue still needs to be triaged
Projects
None yet
Development

No branches or pull requests

1 participant