HomeElementl

Give dagit permission to interact with ECS

Description

Give dagit permission to interact with ECS

Summary:
Two different users encountered suspiciously similar issues with
ECS depoyments today:

https://github.com/dagster-io/dagster/issues/4377

and

https://dagster.slack.com/archives/C01U954MEER/p1626814414314800

I was able to reproduce the issue by launching a run and then
immediately switching to view in progress runs. I started seeing GraphQL
failures indicating NoCredentialsError. I suspect this is because in our
reference ECS deployment, dagit indeed doesn't have the ability to
interact with the ECS SDK.

This adds a TaskRole to dagit with the same widely-scoped access as the
one we attach to the daemon task. We should more narrowly scope both but
I'll leave that task to another day.

Test Plan:
I tested this by redeploying using the updated docker-compose.yml and
verifying that:

a) the TaskRole is attached
b) I can't reproduce the error

Reviewers: dgibson, johann, max

Reviewed By: dgibson

Differential Revision: https://dagster.phacility.com/D8977

Details

Provenance
jordansandersAuthored on Jul 20 2021, 9:39 PM
Reviewer
dgibson
Differential Revision
D8977: Give dagit permission to interact with ECS
Parents
R1:ca32cefd1584: Add a base IRepositoryData class that can be used to implement repositories…
Branches
Unknown
Tags
Unknown