What happened:
When I attempt to use my grafana athena datasource in my newly upgraded grafana 12.4 it failed with IAM permissions because it's trying to use the node instance role. It works in 12.2 however. These are both using the latest athena data source.
What you expected to happen:
How to reproduce it (as minimally and precisely as possible):
Just attempting to test the connection or change the database source or workgroup or table it gives me a permissions denied error. Permission denied on the instance role. It does not have the permissions to do this. However once downgrading back to 12.2 this is no longer an issue.
Anything else we need to know?: This works on 12.2 but not 12.4 with no changes to how the datasource is setup. It uses the service account with irsa attached to the service account on 12.2 but once we switch to 12.4 it works for other data sources not the athena. Specifically it works on the aws cloudwatch datasource and doesn't fall back to the node role.
Environment: EKS 1.34
- Grafana version: 12.2
- Plugin version: 3.1.8
- OS Grafana is installed on: Container using the grafana 12.4 image on alpine
- User OS & Browser: Mac OS Sequoia and google chrome
- Others:
What happened:
When I attempt to use my grafana athena datasource in my newly upgraded grafana 12.4 it failed with IAM permissions because it's trying to use the node instance role. It works in 12.2 however. These are both using the latest athena data source.
What you expected to happen:
How to reproduce it (as minimally and precisely as possible):
Just attempting to test the connection or change the database source or workgroup or table it gives me a permissions denied error. Permission denied on the instance role. It does not have the permissions to do this. However once downgrading back to 12.2 this is no longer an issue.
Anything else we need to know?: This works on 12.2 but not 12.4 with no changes to how the datasource is setup. It uses the service account with irsa attached to the service account on 12.2 but once we switch to 12.4 it works for other data sources not the athena. Specifically it works on the aws cloudwatch datasource and doesn't fall back to the node role.
Environment: EKS 1.34