AppRunner service fails to update with new ECR access role

0

I have an App Runner service that was created successfully, but fails to update if I change the ECR access role. Nothing about the role changed other than the name.

It takes 40min for the update to eventually fail, and the only error messages I receive are:

06-27-2022 03:50:43 PM [AppRunner] Service status is set to RUNNING.
06-27-2022 03:50:42 PM [AppRunner] Service update failed. For details, see service logs.
06-27-2022 03:11:04 PM [AppRunner] Service status is set to OPERATION_IN_PROGRESS.
06-27-2022 03:11:04 PM [AppRunner] Service update started.

Is this a known issue?

  • Thanks for reporting the issue, are the list of permissions assigned to both the roles is identical/same. Since you are using a ECR, the role passed in should have the required permissions to access the target ECR repository. Can you please share some insights around this, so we can look into this issue. Also, can you please share the ARN of the App Runner service? Thanks.

Russ
질문됨 2년 전692회 조회
1개 답변
1
수락된 답변

Hello Russ,

Greetings for the day!

I see that changing the ECR Access Role in the AWS AppRunner service is causing the service update to fail. The list of known issues with AWS AppRunner can tracked on the AppRunner Roadmap - https://github.com/aws/apprunner-roadmap/issues?q=is%3Aissue+is%3Aopen

I was not able to find any issue related to the change in ECR Access Role leading to the failure in service update but I am able to replicate the issue in my test account as well.

I have logged the issue in the service Roadmap and the concerned team will take the necessary action on it. You can follow the issue here - https://github.com/aws/apprunner-roadmap/issues/142

If you want to add any other information related to the issue, please feel free to add it over the github issue.

Regards, Gurpreet S.

AWS
지원 엔지니어
답변함 2년 전
  • Thanks for reporting the issue, are the list of permissions assigned to both the roles is identical/same. Since you are using a ECR, the role passed in should have the required permissions to access the target ECR repository. Can you please share some insights around this, so we can look into this issue. Also, can you please share the ARN of the App Runner service? Thanks.

로그인하지 않았습니다. 로그인해야 답변을 게시할 수 있습니다.

좋은 답변은 질문에 명확하게 답하고 건설적인 피드백을 제공하며 질문자의 전문적인 성장을 장려합니다.

질문 답변하기에 대한 가이드라인

관련 콘텐츠