datomic

Ask questions on the official Q&A site at https://ask.datomic.com!
zendevil 2021-03-21T09:29:13.074500Z

@lanejo01, I created an env in the same vpc as the datomic system, and removed the :creds-profile and :proxy-port keys. Deploying now is giving the following error in the EB logs:

Mar 21 09:21:20 ip-10-213-10-2 web: :data {:cognitect.anomalies/category :cognitect.anomalies/forbidden, :cognitect.anomalies/message Forbidden to read keyfile at <s3://humboi-march-2021-storagef7f305e7-1h3lt-s3datomic-1650q253gkqr1/humboi-march-2021/datomic/access/admin/.keys>. Make sure that your endpoint is correct, and that your ambient AWS credentials allow you to GetObject on the keyfile.}

zendevil 2021-03-21T09:59:03.075700Z

This is the network configuration of my EB environment:

Instance subnets: subnet-032101d2746e9b351
Public IP address: disabled
VPC: vpc-0eb74ad57465ba9df
Visibility: public
I’ve double checked that the VPC id is the same as that of datomic-humboi-march-2021 in the list of VPCs

Joe Lane 2021-03-21T15:00:19.078800Z

@ps what command are you running to get the anomaly exception? “Deploying” isn’t specific enough because I don’t know how your project is “deployed”.

zendevil 2021-03-21T15:01:01.079400Z

@lanejo01 I’m uploading the .jar file from the console ui with the java platform

zendevil 2021-03-21T15:03:02.080200Z

zendevil 2021-03-21T15:03:49.080500Z

zendevil 2021-03-21T16:02:17.081900Z

@lanejo01 so even though the beanstalk webserver and the datomic system are in the same vpc, the keys can’t be accessed. Why?

zendevil 2021-03-21T16:02:51.082200Z

the documentation also mentions that there’s no extra setup required

zendevil 2021-03-21T23:56:25.083400Z

@lanejo01, @jaret any ideas why the .key files can’t be accessed by the elastic beanstalk env which is in the same vpc as the datomic system?