{"action":"created","issue":{"url":"https://api.github.com/repos/rancher/rancher/issues/9315","repository_url":"https://api.github.com/repos/rancher/rancher","labels_url":"https://api.github.com/repos/rancher/rancher/issues/9315/labels{/name}","comments_url":"https://api.github.com/repos/rancher/rancher/issues/9315/comments","events_url":"https://api.github.com/repos/rancher/rancher/issues/9315/events","html_url":"https://github.com/rancher/rancher/issues/9315","id":242227842,"node_id":"MDU6SXNzdWUyNDIyMjc4NDI=","number":9315,"title":"Rancher EBS continues to create new volumes if IAM permissions are incorrect","user":{"login":"oskapt","id":171292,"node_id":"MDQ6VXNlcjE3MTI5Mg==","avatar_url":"https://avatars3.githubusercontent.com/u/171292?v=4","gravatar_id":"","url":"https://api.github.com/users/oskapt","html_url":"https://github.com/oskapt","followers_url":"https://api.github.com/users/oskapt/followers","following_url":"https://api.github.com/users/oskapt/following{/other_user}","gists_url":"https://api.github.com/users/oskapt/gists{/gist_id}","starred_url":"https://api.github.com/users/oskapt/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/oskapt/subscriptions","organizations_url":"https://api.github.com/users/oskapt/orgs","repos_url":"https://api.github.com/users/oskapt/repos","events_url":"https://api.github.com/users/oskapt/events{/privacy}","received_events_url":"https://api.github.com/users/oskapt/received_events","type":"User","site_admin":false},"labels":[{"id":217539410,"node_id":"MDU6TGFiZWwyMTc1Mzk0MTA=","url":"https://api.github.com/repos/rancher/rancher/labels/area/server","name":"area/server","color":"fbca04","default":false},{"id":294075522,"node_id":"MDU6TGFiZWwyOTQwNzU1MjI=","url":"https://api.github.com/repos/rancher/rancher/labels/area/storage","name":"area/storage","color":"fbca04","default":false},{"id":618069126,"node_id":"MDU6TGFiZWw2MTgwNjkxMjY=","url":"https://api.github.com/repos/rancher/rancher/labels/version/1.6","name":"version/1.6","color":"e99695","default":false}],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2017-07-12T01:10:32Z","updated_at":"2018-10-12T06:01:46Z","closed_at":"2018-10-12T06:01:46Z","author_association":"NONE","body":"**Summary:**\r\n\r\nIf a service using an EBS volume fails to start because of IAM permissions problems when creating the volume, the volume is not deleted.  \r\n\r\n**Steps to Reproduce:**\r\n\r\n- Create an IAM user with a policy missing `ec2:CreateTags` like:\r\n```\r\n{\r\n    \"Version\": \"2012-10-17\",\r\n    \"Statement\": [\r\n        {\r\n            \"Sid\": \"Stmt1499811186000\",\r\n            \"Effect\": \"Allow\",\r\n            \"Action\": [\r\n                \"ec2:AttachVolume\",\r\n                \"ec2:CreateVolume\",\r\n                \"ec2:CreateSnapshot\",\r\n                \"ec2:DeleteVolume\",\r\n                \"ec2:DescribeVolumeAttribute\",\r\n                \"ec2:DescribeVolumesModifications\",\r\n                \"ec2:DescribeVolumeStatus\",\r\n                \"ec2:DescribeVolumes\",\r\n                \"ec2:DescribeSnapshots\",\r\n                \"ec2:DescribeTags\",\r\n                \"ec2:DetachVolume\",\r\n                \"ec2:ModifyVolume\",\r\n                \"ec2:ModifyVolumeAttribute\"\r\n            ],\r\n            \"Resource\": [\r\n                \"*\"\r\n            ]\r\n        }\r\n    ]\r\n}\r\n```\r\n- use this user's keys with rancher-ebs\r\n- start a new service that creates an EBS volume\r\n- the service will fail with an error about not having the CreateTags permission\r\n- the service will continue to restart\r\n- every time the service restarts, it will create another EBS volume\r\n- these volumes are never deleted and will incur AWS charges if left around\r\n"},"comment":{"url":"https://api.github.com/repos/rancher/rancher/issues/comments/429213666","html_url":"https://github.com/rancher/rancher/issues/9315#issuecomment-429213666","issue_url":"https://api.github.com/repos/rancher/rancher/issues/9315","id":429213666,"node_id":"MDEyOklzc3VlQ29tbWVudDQyOTIxMzY2Ng==","user":{"login":"loganhz","id":21168270,"node_id":"MDQ6VXNlcjIxMTY4Mjcw","avatar_url":"https://avatars3.githubusercontent.com/u/21168270?v=4","gravatar_id":"","url":"https://api.github.com/users/loganhz","html_url":"https://github.com/loganhz","followers_url":"https://api.github.com/users/loganhz/followers","following_url":"https://api.github.com/users/loganhz/following{/other_user}","gists_url":"https://api.github.com/users/loganhz/gists{/gist_id}","starred_url":"https://api.github.com/users/loganhz/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/loganhz/subscriptions","organizations_url":"https://api.github.com/users/loganhz/orgs","repos_url":"https://api.github.com/users/loganhz/repos","events_url":"https://api.github.com/users/loganhz/events{/privacy}","received_events_url":"https://api.github.com/users/loganhz/received_events","type":"User","site_admin":false},"created_at":"2018-10-12T06:01:46Z","updated_at":"2018-10-12T06:01:46Z","author_association":"MEMBER","body":"Thanks for your report!\r\n\r\nWith the release of Rancher 2.0, development on v1.6 is only limited to critical bug fixes and security patches.\r\n\r\nIf you think we should keep this issue open, please let me know."}}
{"actor":{"display_login":"loganhz"}}