AWS assume role #611
Merged
AWS assume role #611
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Initial commit. Includes: BBL assuming the role while terraforming and the iaas interactions between bbl and aws. Missing: using the ops file found in bosh-deployment: `aws/cpi-assume-role-credentials.yml` to make the AWS CPI use the role. Unit tests/Integration tests.
If the AWS assume role ARN is set, the scripts to create both the BOSH Director and jumpbox need to pass additional ops files and variables. [#184999423] Add AssumeRole support to bbl
[#184999423] Add AssumeRole support to bbl
jpalermo
approved these changes
Jun 3, 2024
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
About
I am looking to use AWS Assume Role with
bbl. I see there has been some work done in the past to add this support in (see the aws-assume-role-support branch), however it looks like that work never got merged intomain.I tried it out myself by rebasing that branch on top of
mainand building a local copy to see if it would work. I was able to successfullybbl upa director using theBBL_AWS_ASSUME_ROLEenv var so thought I'd open this PR to get that work merged in.cc @danielfor and @ystros who originally contributed the commits to the aws-assume-role-support branch.