Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Allow SPIRE-Server to work in all AWS partitions #4423

Closed
achaurasiaConfluent opened this issue Aug 9, 2023 · 1 comment
Closed

Allow SPIRE-Server to work in all AWS partitions #4423

achaurasiaConfluent opened this issue Aug 9, 2023 · 1 comment
Labels
help wanted Issues with this label are ready to start work but are in need of someone to do it priority/backlog Issue is approved and in the backlog

Comments

@achaurasiaConfluent
Copy link
Contributor

Current SPIRE Server aws_iid nodeattestor plugin assume that the role is in partition aws.
Due to current implementation

if cc.config.AssumeRole != "" {
asssumeRoleArn = fmt.Sprintf("arn:aws:iam::%s:role/%s", accountID, cc.config.AssumeRole)
}

spire would only work in aws partition.

Refer https://docs.aws.amazon.com/IAM/latest/UserGuide/reference-arns.html
for aws partition and arn format.

  • Version: 1.7.0
  • Platform: any
  • Subsystem: Server node attestor plugin
@rturner3 rturner3 added help wanted Issues with this label are ready to start work but are in need of someone to do it priority/backlog Issue is approved and in the backlog labels Aug 10, 2023
@MarcosDY
Copy link
Collaborator

MarcosDY commented Sep 7, 2023

Done

@MarcosDY MarcosDY closed this as completed Sep 7, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
help wanted Issues with this label are ready to start work but are in need of someone to do it priority/backlog Issue is approved and in the backlog
Projects
None yet
Development

No branches or pull requests

3 participants