Permissions silently dropped from custom roles
Sep 17, 17:54 UTCSep 17, 21:50 UTC
Duration
3h 56m
Impact
Major
Root cause
Bug
Astronomer, 90 days
17 incidents
Affected
Not listed by the vendor.
Final update
No further issues have been found, so this is being marked as resolved.
Timeline
- Resolved · Sep 17, 21:50 UTC
No further issues have been found, so this is being marked as resolved.
- Monitoring · Sep 17, 19:29 UTC
All custom roles have been restored to their previous functionality and full operation has been restored.
- Identified · Sep 17, 17:54 UTC
We have identified a regression affecting custom roles due to a change rolled out today. This resulted in permissions being dropped from custom roles silently. We have received reports of deploys linked to tokens using custom roles not working. Until the fix has been rolled out, deploy failures can be mitigated by re-adding the `deployment.deploys.create` permission to your custom role. You may also manually restore any other permissions that were silently dropped. We are working on fixing this regression for all affected custom roles.
More from Astronomer
Full historyPHP Security Advisory: Astro and Astro Private Cloud Not Affected; Review Custom Imagesstill openSecurity Update: Runtime Releases and Guidance for the eMudhra/emSign Certificate Issuelasted 45h 27mDelayed delivery of Astro Alertslasted 26h 9mOrganization Dashboards are failing to load with Invalid kid parameter errorlasted 1h 23mAstro UI and API are appearing offline for some userslasted 1h 51mCapacity constraints in GCP us-central1 may delay or fail some task executionslasted 7d 21h