Uploaded image for project: 'OpenShift Cloud Credential Operator'
  1. OpenShift Cloud Credential Operator
  2. CCO-625

Support default region in AWS STS Credential Template

XMLWordPrintable

    • Icon: Story Story
    • Resolution: Unresolved
    • Icon: Major Major
    • None
    • None
    • None
    • False
    • None
    • False

      Currently

      The template secret created by CCO lacks region. ie. `region = us-west-2`

       

          awsSTSCredsTemplate = `[default]
      sts_regional_endpoints = regional
      role_arn = %s
      web_identity_token_file = %s`
      ) 

      We want ability to specify region in the generated secret when operators are installed using standardized flow for STS which creates credential requests providing ARN

      Manually adding this fixes error "'error to get repo options: error to get repo credentials: error get
      s3 credentials: failed to refresh cached credentials, failed to retrieve credentials,
      operation error STS: AssumeRoleWithWebIdentity, https response error StatusCode: 0, RequestID: , request send failed, Post "https://sts/..amazonaws.com/": dial
      tcp: lookup sts..amazonaws.com: no such host'" https://issues.redhat.com/browse/OADP-5354#:~:text=%27error%20to%20get,no%20such%20host%27

              Unassigned Unassigned
              tkaovila@redhat.com Tiger Kaovilai
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

                Created:
                Updated: