Test Flake TestAssumeRoleSessionTags

[flostadler]

TestAssumeRoleSessionTags flaked in #4964

=== NAME  TestAssumeRoleSessionTags
    examples_yaml_test.go:791: failed to deploy: failed to run update: exit status 255
        code: 255
        stdout: Updating (test):
        
         +  pulumi:pulumi:Stack assume-role-session-tags-test creating (0s) 
        @ updating.....
         +  pulumi:pulumi:Stack assume-role-session-tags-test creating (2s) Downloading provider: time
        @ updating.....
         +  pulumi:providers:aws bootstrapProvider creating (0s) 
         +  pulumi:providers:aws bootstrapProvider created (0.00s) 
        @ updating.....
         +  time:index:Sleep wait6s creating (0s) 
         +  aws:iam:Role iamRole creating (0s) 
         +  aws:iam:Role iamRole created (0.39s) 
        @ updating.........
         +  time:index:Sleep wait6s created (6s) 
        @ updating.....
            pulumi:providers:aws provider  error: pulumi:providers:aws resource 'provider' has a problem: unable to validate AWS credentials.
            pulumi:providers:aws provider **failed** 1 error
         +  pulumi:pulumi:Stack assume-role-session-tags-test created 1 message
        Diagnostics:
          pulumi:providers:aws (provider):
            error: pulumi:providers:aws resource 'provider' has a problem: unable to validate AWS credentials.
            Details: Cannot assume IAM Role. IAM Role (arn:aws:iam::894850187425:role/iamRole-98b6267) cannot be assumed.
            
            There are a number of possible causes of this - the most common are:
              * The credentials used in order to assume the role are invalid
              * The credentials do not have appropriate permission to assume the role
              * The role ARN is not valid
            
            Error: operation error STS: AssumeRole, https response error StatusCode: 403, RequestID: de011419-fa6c-4252-977b-b497df27f1fc, api error AccessDenied: User: arn:aws:sts::894850187425:assumed-role/ContinuousDeliveryAdminRole/aws@githubActions is not authorized to perform: sts:AssumeRole on resource: arn:aws:iam::894850187425:role/iamRole-98b6267
        
          pulumi:pulumi:Stack (assume-role-session-tags-test):
            Downloading provider: time

[t0yv0]

One more

--- FAIL: TestAssumeRoleSessionTags (18.00s)

          pulumi:providers:aws (provider):
            error: pulumi:providers:aws resource 'provider' has a problem: unable to validate AWS credentials.
            Details: Cannot assume IAM Role. IAM Role (arn:aws:iam::894850187425:role/iamRole-1de3849) cannot be assumed.

            There are a number of possible causes of this - the most common are:
              * The credentials used in order to assume the role are invalid
              * The credentials do not have appropriate permission to assume the role
              * The role ARN is not valid


Error: operation error STS: AssumeRole, https response error StatusCode: 403, RequestID: 1ab8ac9c-dafe-48c7-99d4-54941656b1ef, api error AccessDenied: User: arn:aws:sts::894850187425:assumed-role/ContinuousDeliveryAdminRole/aws@githubActions is not authorized to perform: sts:AssumeRole on resource: arn:aws:iam::894850187425:role/iamRole-1de3849

[flostadler]

We could try creating the role using the CC provider instead. CloudControl waits/checks for the role to be propagated

[corymhall]

New error

=== NAME  TestAssumeRoleSessionTags
    examples_yaml_test.go:791: failed to deploy: failed to run update: exit status 255
        code: 255
        stdout: Updating (test):
        
         +  pulumi:pulumi:Stack assume-role-session-tags-test creating (0s) 
        @ updating.....
         +  pulumi:pulumi:Stack assume-role-session-tags-test creating (2s) Downloading provider: time
        @ updating......
         +  pulumi:providers:aws bootstrapProvider creating (0s) 
         +  pulumi:providers:aws bootstrapProvider created (0.00s) 
        @ updating....
         +  time:index:Sleep wait6s creating (0s) 
         +  aws:iam:Role iamRole creating (0s) 
        @ updating....
         +  aws:iam:Role iamRole created (0.95s) 
        @ updating........
         +  time:index:Sleep wait6s created (6s) 
        @ updating.....
            pulumi:providers:aws provider  error: pulumi:providers:aws resource 'provider' has a problem: Failed to refresh cached SSO credentials.
         +  pulumi:pulumi:Stack assume-role-session-tags-test created 1 message
            pulumi:providers:aws provider **failed** 1 error
        Diagnostics:
          pulumi:providers:aws (provider):
            error: pulumi:providers:aws resource 'provider' has a problem: Failed to refresh cached SSO credentials.
            Please refresh SSO login.
            NEW: You can use Pulumi ESC to set up dynamic credentials with AWS OIDC to ensure the correct and valid credentials are used.
            Learn more: https://www.pulumi.com/registry/packages/aws/installation-configuration/#dynamically-generate-credentials-via-pulumi-esc
        
          pulumi:pulumi:Stack (assume-role-session-tags-test):
            Downloading provider: time
        
        Resources:
            + 4 created
        
        Duration: 15s
        
        
        stderr: