Attaching multiple user policies does not work

[zx1986]

terraform-provider-minio/minio/resource_minio_iam_policy.go

Line 130 in 627acce

if len(value) > 128 {

It seems only one policy could attach to a user,
if I have multiple policies to attach, I have to flatten the policy list to a string (split by ,) then attach?

[BuJo]

The length is presumably because the Amazon IAM Documentation contains that limit.

I haven't attached multiple policies to one user yet, but that's basically where the minio_iam_user_policy_attachment resource comes into play.

[BuJo]

Hmm.. @zx1986 unsure if I understood you correctly yet. Was that a feature request? Would you like to specify how your solution to add multiple policies to a single user would look like? I'm not sure what your 'policy list' looks like (unflattened?).

[zx1986]

Thanks for your response @BuJo !

We had used minio_iam_user_policy_attachment,
but if we have multiple policies,
using a loop to run minio_iam_user_policy_attachment, it will attach only the last policy.

pseudo codes:

policies:
- policy1
- policy2
- policy3

users:
- user1
- user2

for idx, policy in policies:
  minio_iam_user_policy_attachment ( 
    attachment_idx,  
    policyName: policy.name,
    userName: users[0]
  )

that will be only policy3 attach to user1, policy1 and policy2 will lose attach to user1.
so we flatten policies into a string (split by ,) be like:

long_policy_names = policies.join(',')

minio_iam_user_policy_attachment ( 
  one_attachment,  
  policyName: long_policy_names,
  userName: users[0]
)

it works fine, until the long_policy_names reach the 128 length limit.
😭

[BuJo]

I'm beginning to understand. Funny that this works. I guess the best interface from outside would be to allow an actual array instead of simply a string to avoid problems like this.. I'll have a look into it and see what I can do.

[zhulik]

I'm falling into this issue, any updates?

[kingnarmer]

I am running into same issue. Is there any workaround ?

[zx1986]

the work around for us right now is: to concatenate the list into a string

[asdevcapybara]

@zx1986 could you show example? I have the same issue :/