Skip to content

Update AWS permissions #165

New issue
New issue
Closed
Closed
Update AWS permissions#165
Assignees
j-wags

Description

@mattwthompson
mattwthompson
opened on Nov 10, 2026

Something changed in how AWS permissions are synced up with GitHub and a consequence is that GPU1-based tests cannot be added to new repos

Some more context here: openforcefield/tyff#216 (comment)

Docs are here, I think (make sure to use latest tag, not stable https://gha-runner.readthedocs.io/en/latest/aws/

Footnotes

  1. Or large CPU runners on AWS, or maybe other providers, you get the point ↩

Activity

  1. j-wags
    self-assigned this
    on Nov 10, 2026

  2. j-wags commented on Nov 10, 2026

    @j-wags
    j-wags
    on Nov 10, 2026
    Member

    This is blocking adding AWS GPU tests to tyff

  3. j-wags commented on Nov 13, 2026

    @j-wags
    j-wags
    on Nov 13, 2026
    Member

    On AWS, in IAM --> Roles --> gh-actions-runner-role --> trust relationships I've changed

                    "StringLike": {
                    "token.actions.githubusercontent.com:sub": "repo:openforcefield/*"

    to

                    "StringLike": {
                    "token.actions.githubusercontent.com:sub": [
                        "repo:openforcefield/*",
                        "repo:openforcefield@18539698/tyff@1129989323:*"
                    ]

  4. j-wags commented on Nov 13, 2026

    @j-wags
    j-wags
    on Nov 13, 2026
    Member

    The test run after this change was able to provision a GPU runner on AWS, so I'm closing this issue as complete!

  5. j-wags
    closed this as completedon Nov 13, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

No type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions