3

When my gitlab runner runs the following command:

time packer build -var "git_branch=$CI_BUILD_REF_NAME" -var "git_hash=$CI_BUILD_REF" -color=false packer-application.json

I get the following error:

Build 'amazon-ebs' errored: Error creating temporary keypair: UnauthorizedOperation: You are not authorized to perform this operation.
status code: 403, request id:

However, the command runs successfully if i ssh in to my gitlab runner and run the command manually.

Any ideas?

Joaquim d'Souza
  • 1,416
  • 2
  • 14
  • 25

1 Answers1

1

You need to make sure the build has access to the AWS API keys with access to change the resources. While the build container runs on the runner, it is completely isolated and does not have access to the environment on the underlying host.

You can add (sort of) secret environment variables under the Variables page in the project. They will be available to all builds, so be careful to not give Developer or higher access to people who should not be able to see the keys.

If you have an EC2 role attached to the runner host, and want to utilise that for accessing the API, you could configure your runner to run builds in shell mode, meaning they will execute directly on the host, as a traditional Jenkins build.

jonatan
  • 9,011
  • 2
  • 30
  • 34