{"action":"created","issue":{"url":"https://api.github.com/repos/kubernetes/autoscaler/issues/113","repository_url":"https://api.github.com/repos/kubernetes/autoscaler","labels_url":"https://api.github.com/repos/kubernetes/autoscaler/issues/113/labels{/name}","comments_url":"https://api.github.com/repos/kubernetes/autoscaler/issues/113/comments","events_url":"https://api.github.com/repos/kubernetes/autoscaler/issues/113/events","html_url":"https://github.com/kubernetes/autoscaler/issues/113","id":234960045,"number":113,"title":"AWS Cluster Autoscaler Permissions","user":{"login":"pluttrell","id":4094051,"avatar_url":"https://avatars3.githubusercontent.com/u/4094051?v=4","gravatar_id":"","url":"https://api.github.com/users/pluttrell","html_url":"https://github.com/pluttrell","followers_url":"https://api.github.com/users/pluttrell/followers","following_url":"https://api.github.com/users/pluttrell/following{/other_user}","gists_url":"https://api.github.com/users/pluttrell/gists{/gist_id}","starred_url":"https://api.github.com/users/pluttrell/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/pluttrell/subscriptions","organizations_url":"https://api.github.com/users/pluttrell/orgs","repos_url":"https://api.github.com/users/pluttrell/repos","events_url":"https://api.github.com/users/pluttrell/events{/privacy}","received_events_url":"https://api.github.com/users/pluttrell/received_events","type":"User","site_admin":false},"labels":[{"id":602001307,"url":"https://api.github.com/repos/kubernetes/autoscaler/labels/aws","name":"aws","color":"bfdadc","default":false},{"id":587167715,"url":"https://api.github.com/repos/kubernetes/autoscaler/labels/cluster-autoscaler","name":"cluster-autoscaler","color":"d4c5f9","default":false}],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":11,"created_at":"2017-06-09T23:24:05Z","updated_at":"2018-05-10T13:26:47Z","closed_at":"2017-06-16T00:50:03Z","author_association":"NONE","body":"Using v0.5.4 of the aws-cluster-autoscaler, we're getting this error:\r\n\r\n```\r\nE0609 23:20:59.162974       1 static_autoscaler.go:108] Failed to update node registry: Unable to get first autoscaling.Group for node-us-west-2a.dev.clusters.mydomain.io\r\n```\r\n\r\nIt sure looks like a permission problem... But per the instructions, I have the following policy on my instance role named `nodes.dev.clusters.mydomain.io`:\r\n\r\n```\r\n{\r\n    \"Version\": \"2012-10-17\",\r\n    \"Statement\": [\r\n        {\r\n            \"Effect\": \"Allow\",\r\n            \"Action\": [\r\n                \"autoscaling:DescribeAutoScalingGroups\",\r\n                \"autoscaling:DescribeAutoScalingInstances\",\r\n                \"autoscaling:SetDesiredCapacity\",\r\n                \"autoscaling:TerminateInstanceInAutoScalingGroup\"\r\n            ],\r\n            \"Resource\": \"*\"\r\n        }\r\n    ]\r\n}\r\n```\r\n\r\nWithout this addition, I get a different error:\r\n```\r\nE0609 23:05:48.475214       1 static_autoscaler.go:108] Failed to update node registry: AccessDenied: User: arn:aws:sts::11111111111:assumed-role/nodes.dev.clusters.mydomain.io/i-0472257b3f8d4ec43 is not authorized to perform: autoscaling:DescribeAutoScalingGroups\r\n\tstatus code: 403, request id: 2cf17af0-4d68-11e7-825c-73c99354b20d\r\n```\r\nSo we're thinking that we have the necessary permissions. \r\n\r\nFor reference here's our execution config:\r\n```\r\n./cluster-autoscaler\r\n--cloud-provider=aws\r\n--nodes=1:10:node-us-west-2a.dev.clusters.mydomain.io\r\n--nodes=1:10:node-us-west-2b.dev.clusters.mydomain.io\r\n--nodes=1:10:node-us-west-2c.dev.clusters.mydomain.io\r\n--scale-down-delay=10m\r\n--skip-nodes-with-local-storage=false\r\n--skip-nodes-with-system-pods=true\r\n--v=4\r\n```\r\n\r\nAny ideas on what to do?\r\nIs there any strategy for debugging this?"},"comment":{"url":"https://api.github.com/repos/kubernetes/autoscaler/issues/comments/388052641","html_url":"https://github.com/kubernetes/autoscaler/issues/113#issuecomment-388052641","issue_url":"https://api.github.com/repos/kubernetes/autoscaler/issues/113","id":388052641,"user":{"login":"aleksandra-malinowska","id":4884414,"avatar_url":"https://avatars1.githubusercontent.com/u/4884414?v=4","gravatar_id":"","url":"https://api.github.com/users/aleksandra-malinowska","html_url":"https://github.com/aleksandra-malinowska","followers_url":"https://api.github.com/users/aleksandra-malinowska/followers","following_url":"https://api.github.com/users/aleksandra-malinowska/following{/other_user}","gists_url":"https://api.github.com/users/aleksandra-malinowska/gists{/gist_id}","starred_url":"https://api.github.com/users/aleksandra-malinowska/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/aleksandra-malinowska/subscriptions","organizations_url":"https://api.github.com/users/aleksandra-malinowska/orgs","repos_url":"https://api.github.com/users/aleksandra-malinowska/repos","events_url":"https://api.github.com/users/aleksandra-malinowska/events{/privacy}","received_events_url":"https://api.github.com/users/aleksandra-malinowska/received_events","type":"User","site_admin":false},"created_at":"2018-05-10T13:26:47Z","updated_at":"2018-05-10T13:26:47Z","author_association":"CONTRIBUTOR","body":"Briefly looking at the code, it seems that AWS returns no groups with this name. Based on the error message, method is called with correct group name.\r\n\r\nI'm unable to replicate or debug it, but I guess if you get different results for requests made by Go library and command line tool, maintainers of those tools may be better able to help."}}
{"actor":{"display_login":"aleksandra-malinowska"}}