Skip to content

[v17] Workload Identity: Roles Anywhere tbot service. (#52426)#53408

Merged
strideynet merged 2 commits intobranch/v17from
strideynet/v17/backport-52426-attempt-two
Mar 25, 2025
Merged

[v17] Workload Identity: Roles Anywhere tbot service. (#52426)#53408
strideynet merged 2 commits intobranch/v17from
strideynet/v17/backport-52426-attempt-two

Conversation

@strideynet
Copy link
Copy Markdown
Contributor

Backports #52426

Partially backports #49712

changelog: Introduce workload-identity-aws-ra service for generating AWS credentials using Roles Anywhere directly from tbot.

* Add config for WorkloadIdenttiyAWSRAService

* Add CLI command

* Start hacking on service impl

* Write credentials in AWS credentials file format

* Fix go.mod/go.sum

* Go mod tidy

* Add ARN validation

* Add specific config for AWS session duration/renewal

* Update golden file

* Fix gomod/gosum

* Refactor CheckAndSetDefaults

* Initialize service

* Update CLI flags

* Refactor & add tests

* Use *Context slog calls

* Update service name to include full `roles-anywhere`

* Add mocked AWS rolesanywhere API based test

* Validate region
@strideynet strideynet added this pull request to the merge queue Mar 25, 2025
Merged via the queue into branch/v17 with commit 9993350 Mar 25, 2025
44 checks passed
@strideynet strideynet deleted the strideynet/v17/backport-52426-attempt-two branch March 25, 2025 19:21
@doggydogworld doggydogworld mentioned this pull request Mar 25, 2025
@camscale camscale mentioned this pull request Mar 26, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants