{"action":"created","issue":{"url":"https://api.github.com/repos/saltstack/salt/issues/47269","repository_url":"https://api.github.com/repos/saltstack/salt","labels_url":"https://api.github.com/repos/saltstack/salt/issues/47269/labels{/name}","comments_url":"https://api.github.com/repos/saltstack/salt/issues/47269/comments","events_url":"https://api.github.com/repos/saltstack/salt/issues/47269/events","html_url":"https://github.com/saltstack/salt/issues/47269","id":317200836,"number":47269,"title":"Reopen Windows Minion That Has IAM Role Cannot Access to S3","user":{"login":"isdig","id":37999536,"avatar_url":"https://avatars0.githubusercontent.com/u/37999536?v=4","gravatar_id":"","url":"https://api.github.com/users/isdig","html_url":"https://github.com/isdig","followers_url":"https://api.github.com/users/isdig/followers","following_url":"https://api.github.com/users/isdig/following{/other_user}","gists_url":"https://api.github.com/users/isdig/gists{/gist_id}","starred_url":"https://api.github.com/users/isdig/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/isdig/subscriptions","organizations_url":"https://api.github.com/users/isdig/orgs","repos_url":"https://api.github.com/users/isdig/repos","events_url":"https://api.github.com/users/isdig/events{/privacy}","received_events_url":"https://api.github.com/users/isdig/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-04-24T12:22:35Z","updated_at":"2018-04-24T13:33:53Z","closed_at":null,"author_association":"NONE","body":"\r\n### Description of Issue/Question\r\n\r\nI reopened this #47176 issue because the thing @gtmanfred mentioned actually works. In addition to following screenshots from earlier I can also access the file and download it by running Python Boto modules directly from the Windows machine. \r\n\r\ngtmanfred's SS: I don't know it was typo or intentional to show me 404 but your IAM role is \"gttest\". Instead \"gtest\" is written at the end of second request.\r\n\r\n![](https://user-images.githubusercontent.com/732321/39003125-d1ba4f96-43bf-11e8-8dab-ac7e388b8df5.png)\r\n\r\n**My SS:**\r\n\r\n![](https://user-images.githubusercontent.com/37999536/39032803-cb153012-4477-11e8-956e-50175baeb2cb.JPG)\r\n\r\n\r\nTrying to download a file from AWS S3 to my Windows minion (IAM role is attached) but it says \r\n\r\n> ERROR: Failed to get file. InvalidAccessKeyId: The AWS Access Key Id you provided does not exist in our records.\r\n\r\nI can get the file by declaring s3.keyid and s3.key in minion config file but I need to do it via IAM Role. \r\n\r\nBTW I also can access to the file using the same IAM role on **Linux minions** (they are both ubuntu and one of them is my master/minion called \"salt-master-minion\") .  \r\n\r\n\r\n[Related Doc](https://docs.saltstack.com/en/latest/ref/modules/all/salt.modules.s3.html)\r\n\r\nThis page says you have to do _no additional configuration_ for IAM method to work. That's true for only Linux minions in my case.\r\n\r\n### Setup\r\n**Minion Config**\r\n\r\n`master: master's-private-ip`\r\n\r\n\r\n### Steps to Reproduce Issue\r\nThe command I'm trying to run:\r\n\r\n`salt 'miniwin' s3.get mybucket index.html local_file=\"C:\\index.html -l trace`\r\n\r\nTracelog\r\n```\r\n root@ip-my-private-ip:/etc/salt# salt 'mini*' s3.get mybucket index.html local_file=\"C:\\index.html\" -l trace\r\n[DEBUG   ] Reading configuration from /etc/salt/master\r\n[DEBUG   ] Including configuration from '/etc/salt/master.d/roots.conf'\r\n[DEBUG   ] Reading configuration from /etc/salt/master.d/roots.conf\r\n[DEBUG   ] Using cached minion ID from /etc/salt/minion_id: salt-master-minion\r\n[DEBUG   ] Missing configuration file: /root/.saltrc\r\n[TRACE   ] The required configuration section, 'fluent_handler', was not found the in the configuration. Not loading the fluent logging handlers module.\r\n[TRACE   ] None of the required configuration sections, 'logstash_udp_handler' and 'logstash_zmq_handler', were found in the configuration. Not loading the Logstash logging handlers module.\r\n[DEBUG   ] Configuration file path: /etc/salt/master\r\n[WARNING ] Insecure logging configuration detected! Sensitive data may be logged.\r\n[DEBUG   ] Reading configuration from /etc/salt/master\r\n[DEBUG   ] Including configuration from '/etc/salt/master.d/roots.conf'\r\n[DEBUG   ] Reading configuration from /etc/salt/master.d/roots.conf\r\n[DEBUG   ] Using cached minion ID from /etc/salt/minion_id: salt-master-minion\r\n[DEBUG   ] Missing configuration file: /root/.saltrc\r\n[DEBUG   ] MasterEvent PUB socket URI: /var/run/salt/master/master_event_pub.ipc\r\n[DEBUG   ] MasterEvent PULL socket URI: /var/run/salt/master/master_event_pull.ipc\r\n[DEBUG   ] Initializing new AsyncZeroMQReqChannel for (u'/etc/salt/pki/master', u'salt-master-minion_master', u'tcp://127.0.0.1:4506', u'clear')\r\n[DEBUG   ] Connecting the Minion to the Master URI (for the return server): tcp://127.0.0.1:4506\r\n[DEBUG   ] Trying to connect to: tcp://127.0.0.1:4506\r\n[TRACE   ] Inserted key into loop_instance_map id 140155722460408 for key (u'/etc/salt/pki/master', u'salt-master-minion_master', u'tcp://127.0.0.1:4506', u'clear') and process 10612\r\n[DEBUG   ] Initializing new IPCClient for path: /var/run/salt/master/master_event_pub.ipc\r\n[TRACE   ] IPCClient: Connecting to socket: /var/run/salt/master/master_event_pub.ipc\r\n[TRACE   ] func get_cli_event_returns()\r\n[DEBUG   ] LazyLoaded local_cache.get_load\r\n[DEBUG   ] Reading minion list from /var/cache/salt/master/jobs/ed/12954a04f58e539be6ea6df6c04eea5b8caaf8e511c436e9ecbb4ef8c10aef/.minions.p\r\n[DEBUG   ] get_iter_returns for jid 20180419103735507121 sent to set(['miniwin']) will timeout at 10:37:40.514718\r\n[TRACE   ] _get_event() waited 0 seconds and received nothing\r\n[TRACE   ] get_event() received = {u'tag': 'salt/job/20180419103735507121/new', u'data': {u'tgt_type': u'glob', u'jid': u'20180419103735507121', u'tgt': u'mini*', u'missing': [], u'_stamp': u'2018-04-19T10:37:35.507688', u'user': u'sudo_ubuntu', u'arg': [u'mybucket', u'index.html', {u'local_file': u'C:\\\\index.html', u'__kwarg__': True}], u'fun': u's3.get', u'minions': [u'miniwin']}}\r\n[TRACE   ] _get_event() waited 0 seconds and received nothing\r\n[TRACE   ] _get_event() waited 0 seconds and received nothing\r\n[TRACE   ] _get_event() waited 0 seconds and received nothing\r\n[TRACE   ] _get_event() waited 0 seconds and received nothing\r\n[TRACE   ] _get_event() waited 0 seconds and received nothing\r\n[TRACE   ] _get_event() waited 0 seconds and received nothing\r\n[TRACE   ] _get_event() waited 0 seconds and received nothing\r\n[TRACE   ] _get_event() waited 0 seconds and received nothing\r\n[TRACE   ] _get_event() waited 0 seconds and received nothing\r\n[TRACE   ] _get_event() waited 0 seconds and received nothing\r\n[TRACE   ] _get_event() waited 0 seconds and received nothing\r\n[TRACE   ] _get_event() waited 0 seconds and received nothing\r\n[TRACE   ] _get_event() waited 0 seconds and received nothing\r\n[TRACE   ] _get_event() waited 0 seconds and received nothing\r\n[TRACE   ] _get_event() waited 0 seconds and received nothing\r\n[TRACE   ] _get_event() waited 0 seconds and received nothing\r\n[TRACE   ] _get_event() waited 0 seconds and received nothing\r\n[TRACE   ] _get_event() waited 0 seconds and received nothing\r\n[TRACE   ] _get_event() waited 0 seconds and received nothing\r\n[TRACE   ] _get_event() waited 0 seconds and received nothing\r\n[TRACE   ] _get_event() waited 0 seconds and received nothing\r\n[TRACE   ] _get_event() waited 0 seconds and received nothing\r\n[TRACE   ] _get_event() waited 0 seconds and received nothing\r\n[TRACE   ] _get_event() waited 0 seconds and received nothing\r\n[TRACE   ] _get_event() waited 0 seconds and received nothing\r\n[TRACE   ] _get_event() waited 0 seconds and received nothing\r\n[TRACE   ] _get_event() waited 0 seconds and received nothing\r\n[TRACE   ] _get_event() waited 0 seconds and received nothing\r\n[TRACE   ] _get_event() waited 0 seconds and received nothing\r\n[TRACE   ] _get_event() waited 0 seconds and received nothing\r\n[TRACE   ] _get_event() waited 0 seconds and received nothing\r\n[TRACE   ] _get_event() waited 0 seconds and received nothing\r\n[TRACE   ] _get_event() waited 0 seconds and received nothing\r\n[TRACE   ] _get_event() waited 0 seconds and received nothing\r\n[TRACE   ] _get_event() waited 0 seconds and received nothing\r\n[TRACE   ] _get_event() waited 0 seconds and received nothing\r\n[TRACE   ] _get_event() waited 0 seconds and received nothing\r\n[TRACE   ] _get_event() waited 0 seconds and received nothing\r\n[TRACE   ] _get_event() waited 0 seconds and received nothing\r\n[TRACE   ] _get_event() waited 0 seconds and received nothing\r\n[TRACE   ] _get_event() waited 0 seconds and received nothing\r\n[TRACE   ] _get_event() waited 0 seconds and received nothing\r\n[TRACE   ] _get_event() waited 0 seconds and received nothing\r\n[TRACE   ] _get_event() waited 0 seconds and received nothing\r\n[TRACE   ] _get_event() waited 0 seconds and received nothing\r\n[TRACE   ] _get_event() waited 0 seconds and received nothing\r\n[DEBUG   ] Checking whether jid 20180419103735507121 is still running\r\n[DEBUG   ] Initializing new AsyncZeroMQReqChannel for (u'/etc/salt/pki/master', u'salt-master-minion_master', u'tcp://127.0.0.1:4506', u'clear')\r\n[DEBUG   ] Connecting the Minion to the Master URI (for the return server): tcp://127.0.0.1:4506\r\n[DEBUG   ] Trying to connect to: tcp://127.0.0.1:4506\r\n[TRACE   ] Inserted key into loop_instance_map id 140155705480472 for key (u'/etc/salt/pki/master', u'salt-master-minion_master', u'tcp://127.0.0.1:4506', u'clear') and process 10612\r\n[TRACE   ] get_event() caching unwanted event = {u'tag': '20180419103740603869', u'data': {u'_stamp': u'2018-04-19T10:37:40.604131', u'minions': [u'miniwin']}}\r\n[TRACE   ] _get_event() waited 0 seconds and received nothing\r\n[TRACE   ] get_event() caching unwanted event = {u'tag': 'salt/job/20180419103740603869/new', u'data': {u'tgt_type': u'list', u'jid': u'20180419103740603869', u'tgt': [u'miniwin'], u'missing': [], u'_stamp': u'2018-04-19T10:37:40.604463', u'user': u'sudo_ubuntu', u'arg': [u'20180419103735507121'], u'fun': u'saltutil.find_job', u'minions': [u'miniwin']}}\r\n[TRACE   ] _get_event() waited 0 seconds and received nothing\r\n[TRACE   ] get_event() returning cached event = {u'tag': 'salt/job/20180419103740603869/new', u'data': {u'tgt_type': u'list', u'jid': u'20180419103740603869', u'tgt': [u'miniwin'], u'missing': [], u'_stamp': u'2018-04-19T10:37:40.604463', u'user': u'sudo_ubuntu', u'arg': [u'20180419103735507121'], u'fun': u'saltutil.find_job', u'minions': [u'miniwin']}}\r\n[DEBUG   ] Passing on saltutil error. Key 'u'retcode' missing from client return. This may be an error in the client.\r\n[TRACE   ] _get_event() waited 0 seconds and received nothing\r\n[TRACE   ] _get_event() waited 0 seconds and received nothing\r\n[TRACE   ] _get_event() waited 0 seconds and received nothing\r\n[TRACE   ] _get_event() waited 0 seconds and received nothing\r\n[TRACE   ] _get_event() waited 0 seconds and received nothing\r\n[TRACE   ] _get_event() waited 0 seconds and received nothing\r\n[TRACE   ] _get_event() waited 0 seconds and received nothing\r\n[TRACE   ] _get_event() waited 0 seconds and received nothing\r\n[TRACE   ] _get_event() waited 0 seconds and received nothing\r\n[TRACE   ] _get_event() waited 0 seconds and received nothing\r\n[TRACE   ] _get_event() waited 0 seconds and received nothing\r\n[TRACE   ] _get_event() waited 0 seconds and received nothing\r\n[TRACE   ] _get_event() waited 0 seconds and received nothing\r\n[TRACE   ] _get_event() waited 0 seconds and received nothing\r\n[TRACE   ] get_event() caching unwanted event = {u'tag': 'salt/job/20180419103735507121/ret/miniwin', u'data': {u'fun_args': [u'mybucket', u'index.html', {u'local_file': u'C:\\\\index.html'}], u'jid': u'20180419103735507121', u'return': u'ERROR: Failed to get file. InvalidAccessKeyId: The AWS Access Key Id you provided does not exist in our records.', u'success': False, u'cmd': u'_return', u'_stamp': u'2018-04-19T10:37:42.051021', u'fun': u's3.get', u'id': u'miniwin', u'out': u'nested'}}\r\n[TRACE   ] _get_event() waited 0 seconds and received nothing\r\n[TRACE   ] get_event() returning cached event = {u'tag': 'salt/job/20180419103735507121/ret/miniwin', u'data': {u'fun_args': [u'mybucket', u'index.html', {u'local_file': u'C:\\\\index.html'}], u'jid': u'20180419103735507121', u'return': u'ERROR: Failed to get file. InvalidAccessKeyId: The AWS Access Key Id you provided does not exist in our records.', u'success': False, u'cmd': u'_return', u'_stamp': u'2018-04-19T10:37:42.051021', u'fun': u's3.get', u'id': u'miniwin', u'out': u'nested'}}\r\n[DEBUG   ] jid 20180419103735507121 return from miniwin\r\n[DEBUG   ] return event: {u'miniwin': {u'jid': u'20180419103735507121', u'ret': u'ERROR: Failed to get file. InvalidAccessKeyId: The AWS Access Key Id you provided does not exist in our records.', u'out': u'nested'}}\r\n[DEBUG   ] LazyLoaded nested.output\r\n[TRACE   ] data = {u'miniwin': u'ERROR: Failed to get file. InvalidAccessKeyId: The AWS Access Key Id you provided does not exist in our records.'}\r\nminiwin:\r\n    ERROR: Failed to get file. InvalidAccessKeyId: The AWS Access Key Id you provided does not exist in our records.\r\n[TRACE   ] _get_event() waited 0 seconds and received nothing\r\n[DEBUG   ] jid 20180419103735507121 found all minions set([u'miniwin'])\r\n\r\n```\r\n\r\n\r\n### Versions\r\n**Master**:\r\n```\r\nSalt Version:\r\n           Salt: 2018.3.0\r\n\r\nDependency Versions:\r\n           cffi: Not Installed\r\n       cherrypy: 3.5.0\r\n       dateutil: 2.4.2\r\n      docker-py: Not Installed\r\n          gitdb: 0.6.4\r\n      gitpython: 1.0.1\r\n          ioflo: Not Installed\r\n         Jinja2: 2.8\r\n        libgit2: Not Installed\r\n        libnacl: Not Installed\r\n       M2Crypto: Not Installed\r\n           Mako: 1.0.3\r\n   msgpack-pure: Not Installed\r\n msgpack-python: 0.4.6\r\n   mysql-python: Not Installed\r\n      pycparser: Not Installed\r\n       pycrypto: 2.6.1\r\n   pycryptodome: Not Installed\r\n         pygit2: Not Installed\r\n         Python: 2.7.12 (default, Dec  4 2017, 14:50:18)\r\n   python-gnupg: Not Installed\r\n         PyYAML: 3.11\r\n          PyZMQ: 15.2.0\r\n           RAET: Not Installed\r\n          smmap: 0.9.0\r\n        timelib: Not Installed\r\n        Tornado: 4.2.1\r\n            ZMQ: 4.1.4\r\n\r\nSystem Versions:\r\n           dist: Ubuntu 16.04 xenial\r\n         locale: UTF-8\r\n        machine: x86_64\r\n        release: 4.4.0-1054-aws\r\n         system: Linux\r\n        version: Ubuntu 16.04 xenial\r\n```\r\n\r\n**Minion**\r\n\r\n```\r\nSalt Version:\r\n           Salt: 2018.3.0\r\n \r\nDependency Versions:\r\n           cffi: 1.10.0\r\n       cherrypy: 10.2.1\r\n       dateutil: 2.6.1\r\n      docker-py: Not Installed\r\n          gitdb: 2.0.3\r\n      gitpython: Not Installed\r\n          ioflo: Not Installed\r\n         Jinja2: 2.10\r\n        libgit2: Not Installed\r\n        libnacl: Not Installed\r\n       M2Crypto: Not Installed\r\n           Mako: 1.0.7\r\n   msgpack-pure: Not Installed\r\n msgpack-python: 0.4.8\r\n   mysql-python: Not Installed\r\n      pycparser: 2.18\r\n       pycrypto: 2.6.1\r\n   pycryptodome: Not Installed\r\n         pygit2: Not Installed\r\n         Python: 3.5.3 (v3.5.3:1880cb95a742, Jan 16 2017, 16:02:32) [MSC v.1900 64 bit (AMD64)]\r\n   python-gnupg: 0.4.1\r\n         PyYAML: 3.12\r\n          PyZMQ: 16.0.3\r\n           RAET: Not Installed\r\n          smmap: 2.0.3\r\n        timelib: 0.2.4\r\n        Tornado: 4.5.2\r\n            ZMQ: 4.1.6\r\n \r\nSystem Versions:\r\n           dist:   \r\n         locale: cp1252\r\n        machine: AMD64\r\n        release: 2016Server\r\n         system: Windows\r\n        version: 2016Server 10.0.14393 SP0 Multiprocessor Free\r\n\r\n```\r\n\r\n"},"comment":{"url":"https://api.github.com/repos/saltstack/salt/issues/comments/383932092","html_url":"https://github.com/saltstack/salt/issues/47269#issuecomment-383932092","issue_url":"https://api.github.com/repos/saltstack/salt/issues/47269","id":383932092,"user":{"login":"gtmanfred","id":732321,"avatar_url":"https://avatars0.githubusercontent.com/u/732321?v=4","gravatar_id":"","url":"https://api.github.com/users/gtmanfred","html_url":"https://github.com/gtmanfred","followers_url":"https://api.github.com/users/gtmanfred/followers","following_url":"https://api.github.com/users/gtmanfred/following{/other_user}","gists_url":"https://api.github.com/users/gtmanfred/gists{/gist_id}","starred_url":"https://api.github.com/users/gtmanfred/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/gtmanfred/subscriptions","organizations_url":"https://api.github.com/users/gtmanfred/orgs","repos_url":"https://api.github.com/users/gtmanfred/repos","events_url":"https://api.github.com/users/gtmanfred/events{/privacy}","received_events_url":"https://api.github.com/users/gtmanfred/received_events","type":"User","site_admin":false},"created_at":"2018-04-24T13:33:53Z","updated_at":"2018-04-24T13:33:53Z","author_association":"OWNER","body":"Ahh yes, that was a typo, sorry, i meant to reopen the other issue."}}
{"actor":{"display_login":"gtmanfred"}}