AWS: Update S3 ACL resource for kOps state store

[ameukam]

Ensure E2E tests can push objects to the bucket state store.

[k8s-ci-robot]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: ameukam

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• infra/aws/OWNERS [ameukam]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[k8s-infra-ci-robot]

Ran Plan for dir: infra/aws/terraform/kops-infra-ci workspace: default

Plan Error

Show Output

running 'sh -c' '/usr/local/bin/terraform1.9.8 init -input=false -upgrade' in '/atlantis/repos/kubernetes/k8s.io/8659/default/infra/aws/terraform/kops-infra-ci': exit status 1
Initializing the backend...
Upgrading modules...
Downloading registry.terraform.io/terraform-aws-modules/iam/aws 5.60.0 for ci_iam_group...
- ci_iam_group in .terraform/modules/ci_iam_group/modules/iam-group-with-policies
Downloading registry.terraform.io/terraform-aws-modules/iam/aws 6.2.1 for cluster_autoscaler_irsa_role...
- cluster_autoscaler_irsa_role in .terraform/modules/cluster_autoscaler_irsa_role/modules/iam-role-for-service-accounts
Downloading registry.terraform.io/terraform-aws-modules/iam/aws 6.2.1 for ebs_csi_irsa...
- ebs_csi_irsa in .terraform/modules/ebs_csi_irsa/modules/iam-role-for-service-accounts
Downloading registry.terraform.io/terraform-aws-modules/eks/aws 21.3.2 for eks...
- eks in .terraform/modules/eks
- eks.eks_managed_node_group in .terraform/modules/eks/modules/eks-managed-node-group
- eks.eks_managed_node_group.user_data in .terraform/modules/eks/modules/_user_data
- eks.fargate_profile in .terraform/modules/eks/modules/fargate-profile
Downloading registry.terraform.io/terraform-aws-modules/kms/aws 4.0.0 for eks.kms...
- eks.kms in .terraform/modules/eks.kms
- eks.self_managed_node_group in .terraform/modules/eks/modules/self-managed-node-group
- eks.self_managed_node_group.user_data in .terraform/modules/eks/modules/_user_data
Downloading registry.terraform.io/terraform-aws-modules/eks/aws 20.37.2 for eks-auth...
- eks-auth in .terraform/modules/eks-auth/modules/aws-auth
Downloading registry.terraform.io/terraform-aws-modules/iam/aws 5.60.0 for kops_ci_user...
- kops_ci_user in .terraform/modules/kops_ci_user/modules/iam-user
Downloading registry.terraform.io/terraform-aws-modules/vpc/aws 6.4.0 for vpc...
- vpc in .terraform/modules/vpc
Downloading registry.terraform.io/terraform-aws-modules/iam/aws 6.2.1 for vpc_cni_irsa...
- vpc_cni_irsa in .terraform/modules/vpc_cni_irsa/modules/iam-role-for-service-accounts
Downloading registry.terraform.io/terraform-aws-modules/vpc/aws 6.4.0 for vpc_endpoints...
- vpc_endpoints in .terraform/modules/vpc_endpoints/modules/vpc-endpoints
╷
│ Warning: Deprecated Parameters
│ 
│   on terraform.tf line 18, in terraform:
│   18:   backend "s3" {
│ 
│ The following parameters have been deprecated. Replace them as follows:
│   * role_arn     -> assume_role.role_arn
│   * session_name -> assume_role.session_name
│ 
╵
╷
│ Error: No valid credential sources found
│ 
│ Please see https://www.terraform.io/docs/language/settings/backends/s3.html
│ for more information about providing credentials.
│ 
│ Error: failed to refresh cached credentials, no EC2 IMDS role found,
│ operation error ec2imds: GetMetadata, http response error StatusCode: 404,
│ request to EC2 IMDS failed
│ 
╵

[ameukam]

This fix failures encounted after the bucket migration: kubernetes/test-infra#35724

[ameukam]

/override "atlantis/plan"
/override "atlantis/plan: infra/aws/terraform/kops-infra-ci/default"

[k8s-ci-robot]

@ameukam: Overrode contexts on behalf of ameukam: atlantis/plan, atlantis/plan: infra/aws/terraform/kops-infra-ci/default

In response to this:

/override "atlantis/plan"
/override "atlantis/plan: infra/aws/terraform/kops-infra-ci/default"

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[ameukam]

cc @hakman @rifelpet

[hakman]

/lgtm