Fork origin pull requests are currently blocked

[bryan-aguilar]

Pull Requests began to experience a high rate of failure due to throttling from Public ECR when pulling images. These throttling errors have been experiences in the past but have often been mitigated by rerunning the workflow. Recently (~1week) throttling failures continued to happen even after numerous retries.

In an attempt to mitigate this issue credentials account credentials were added to the PR Build workflow. This allows login to Public ECR so requests made are authenticated. This alleviated the issue but created a new one. Secrets are not passed to workflows. Putting the IAM Role ARN in plain text will also not solve the issue. OIDC authorization will continue to fail due to the subject claim for fork origin pull requests. This has been tested on a fork and the failing behavior has been validated.

Current Mitigation Steps: If you have write access to this repository then push your branch to this remote ref. Submit your PR and the PR Build workflow will be able to make authenticated requests to Public ECR

Possible Solutions:

1. Remove the need to pull from ECR for mock tests. Build images for each test case or possibly once per workflow.
2. Pull images from Public ECR once per workflow. It may be possible to do a setup step where the images are pulled once and then cached for later use.

[github-actions]

This issue is stale because it has been open 60 days with no activity. Remove stale label or comment or this will be closed in 30 days.

[github-actions]

This issue is stale because it has been open 60 days with no activity. Remove stale label or comment or this will be closed in 30 days.

[github-actions]

This issue was closed because it has been marked as stale for 30 days with no activity.

[github-actions]

This issue is stale because it has been open 60 days with no activity. Remove stale label or comment or this will be closed in 30 days.

[github-actions]

This issue was closed because it has been marked as stale for 30 days with no activity.

[github-actions]

This issue is stale because it has been open 60 days with no activity. Remove stale label or comment or this will be closed in 30 days.

[github-actions]

This issue was closed because it has been marked as stale for 30 days with no activity.

[github-actions]

This issue is stale because it has been open 60 days with no activity. Remove stale label or comment or this will be closed in 30 days.

[github-actions]

This issue was closed because it has been marked as stale for 30 days with no activity.