Skip to content

[v17] Workload Identity: Roles Anywhere tbot service. (#52426)#53401

Closed
strideynet wants to merge 3 commits intobranch/v17from
strideynet/v17/backport-52426
Closed

[v17] Workload Identity: Roles Anywhere tbot service. (#52426)#53401
strideynet wants to merge 3 commits intobranch/v17from
strideynet/v17/backport-52426

Conversation

@strideynet
Copy link
Copy Markdown
Contributor

Backports #52426

changelog: Introduce workload-identity-aws-ra service for generating AWS credentials using Roles Anywhere directly from tbot.

* Add config for WorkloadIdenttiyAWSRAService

* Add CLI command

* Start hacking on service impl

* Write credentials in AWS credentials file format

* Fix go.mod/go.sum

* Go mod tidy

* Add ARN validation

* Add specific config for AWS session duration/renewal

* Update golden file

* Fix gomod/gosum

* Refactor CheckAndSetDefaults

* Initialize service

* Update CLI flags

* Refactor & add tests

* Use *Context slog calls

* Update service name to include full `roles-anywhere`

* Add mocked AWS rolesanywhere API based test

* Validate region
@strideynet strideynet closed this Mar 25, 2025
@strideynet strideynet deleted the strideynet/v17/backport-52426 branch March 25, 2025 18:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant