Fix AWS IAM role access (#556)

* Fix AWS IAM role access

* one more

* move

Author: yunfeng-scale

.circleci/config.yml

@@ -99,6 +99,9 @@ jobs:
     executor: ubuntu-large
     steps:
       - checkout
+      - aws-cli/setup:
+          role-arn: ${CIRCLECI_ROLE_ARN}
+          aws-region: AWS_REGION
       - run:
           name: Build Docker Image
           command: |
@@ -176,9 +179,6 @@ jobs:
             pip install -r model-engine/requirements.txt
       - install_client
       - install_server
-      - aws-cli/setup:
-          role-arn: ${CIRCLECI_ROLE_ARN}
-          aws-region: AWS_REGION
       - run:
           name: Run integration tests
           command: |

.circleci/resources/.minikube-config-map

@@ -1,4 +1,5 @@
 # Configmap for AWS credentials inside minikube.
 [default]
-aws_access_key_id = $CIRCLECI_AWS_ACCESS_KEY
-aws_secret_access_key = $CIRCLECI_AWS_SECRET_KEY
+aws_access_key_id = $AWS_ACCESS_KEY_ID
+aws_secret_access_key = $AWS_SECRET_ACCESS_KEY
+aws_session_token = $AWS_SESSION_TOKEN

.circleci/resources/.minikube-registry-creds

@@ -3,9 +3,9 @@
 # See expect syntax here: https://manpages.ubuntu.com/manpages/trusty/man1/expect.1.html
 spawn minikube addons configure registry-creds
 expect "Do you want to enable AWS Elastic Container Registry?" { send "y\r" }
-expect "Enter AWS Access Key ID:" { send "$CIRCLECI_AWS_ACCESS_KEY\r" }
-expect "Enter AWS Secret Access Key:" { send "$CIRCLECI_AWS_SECRET_KEY\r" }
-expect "Enter AWS Session Token:" { send "\r" }
+expect "Enter AWS Access Key ID:" { send "$AWS_ACCESS_KEY_ID\r" }
+expect "Enter AWS Secret Access Key:" { send "$AWS_SECRET_ACCESS_KEY\r" }
+expect "Enter AWS Session Token:" { send "$AWS_SESSION_TOKEN\r" }
 expect "Enter AWS Region:" { send "us-west-2\r" }
 expect "Enter 12 digit AWS Account ID (Comma separated list):" { send "$CIRCLECI_AWS_ACCOUNT_ID\r" }
 expect "Enter ARN of AWS role to assume:" { send "\r" }