Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Use default credential chain if credentialsfile not specified #12

Merged
merged 1 commit into from
Jan 2, 2019

Conversation

slai
Copy link

@slai slai commented Dec 10, 2018

At the moment, credentials must come from the credentialsfile setting in the config file because the AWS SDK credentials chain has been replaced.

This means it isn't possible to use environment variables to specify the credentials at all, or from the instance/container IAM role if we ever decide to go down that road.

This change makes go-minipypi only replace the default credential chain if credentialfile is specified in the config. If not, then the default credential chain will be used, i.e. the order defined here - https://docs.aws.amazon.com/sdk-for-go/v1/developer-guide/configuring-sdk.html#specifying-credentials

@slai slai requested review from msf and oliland December 10, 2018 18:33
@slai
Copy link
Author

slai commented Dec 10, 2018

I'm making this change so I can use go-minipypi with credentials set in the Circle config file only

@oliland
Copy link

oliland commented Dec 15, 2018

I don't think this is necessary - let's pair on Monday.

Copy link

@oliland oliland left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I misunderstood this - I though we were avoiding the default credentials chain. Better to use it if possible.

@slai slai changed the base branch from vendor_deps to master January 2, 2019 14:36
At the moment, credentials must come from the `credentialsfile` setting in the config file because the AWS SDK credentials chain has been replaced.

This means it isn't possible to use environment variables to specify the credentials at all, or from the instance/container IAM role if we ever decide to go down that road.

This change makes go-minipypi only replace the default credential chain if credentialfile is specified in the config. If not, then the default credential chain will be used, i.e. the order defined here - https://docs.aws.amazon.com/sdk-for-go/v1/developer-guide/configuring-sdk.html#specifying-credentials
@slai slai merged commit 49170c8 into master Jan 2, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants