infra-bootstrap: cannot complete a first-time bootstrap as documented #451

New issue

Open

opened 2026-09-09 21:16:20 +00:00 by pksublime · 0 comments

pksublime commented

2026-09-09 21:16:20 +00:00

(Migrated from codeberg.org)

Following infra-bootstrap/README.md step 2 on a fresh AWS account, the bootstrap fails.

Please add support for the AWS CLI's aws login flow (login_session in ~/.aws/config, token cache in ~/.aws/login/) landed in aws-sdk-go-v2/config v1.32.0 (2025-11-19).
This is confusing to diagnose because entrypoint.sh's own precheck
(aws sts get-caller-identity) succeeds — the CLI resolves the session fine — and
because OpenTofu's built-in S3 backend does support login_session, so the
backend authenticates while the provider does not.

Further, entrypoint.sh passes no -var, so it always uses default bucket name which are already taken globally and the README itself says to append the account ID. Plan succeeds fine, and this shows up at the apply phase.

Following `infra-bootstrap/README.md` step 2 on a fresh AWS account, the bootstrap fails. Please add support for the AWS CLI's `aws login` flow (`login_session` in `~/.aws/config`, token cache in `~/.aws/login/`) landed in `aws-sdk-go-v2/config` **v1.32.0** (2025-11-19). This is confusing to diagnose because `entrypoint.sh`'s own precheck (`aws sts get-caller-identity`) succeeds — the CLI resolves the session fine — and because OpenTofu's built-in S3 backend *does* support `login_session`, so the backend authenticates while the provider does not. Further, `entrypoint.sh` passes no `-var`, so it always uses default bucket name which are already taken globally and the README itself says to append the account ID. Plan succeeds fine, and this shows up at the apply phase.

~~anton referenced this issue 2026-10-15 20:10:24 +00:00~~

fix(setup): make local platform setup repeatable #466

anton referenced this issue

2026-10-15 20:11:38 +00:00

fix(setup): make local platform setup repeatable #466

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

public/platform#451

No description provided.

Rows
Columns