Uploaded image for project: 'Container Tools'
  1. Container Tools
  2. RUN-4147

Verify OIDC Connectivity and Dry Run

XMLWordPrintable

    • Icon: Story Story
    • Resolution: Unresolved
    • Icon: Undefined Undefined
    • None
    • None
    • None
    • RUN 284

      Summary: Execute Dry Run to Verify AWS OIDC Authentication Description: Run a test execution of the updated pipeline to verify that the OIDC handshake is successful and the correct IAM role is assumed. This validates the removal of long-lived access keys.

      Tasks:

      • Add a temporary debugging step (or use a dry-run script) to run aws sts get-caller-identity.
      • Trigger the workflow manually or via a test branch push.
      • Analyze the build logs to confirm the connection succeeded without Access Key ID/Secret Access Key inputs.
      • Verify the output ARN matches the expected Role ARN.

      Acceptance Criteria:

      • [ ] The workflow completes the "Configure AWS Credentials" step successfully.
      • [ ] aws sts get-caller-identity returns the expected assumed-role ARN.
      • [ ] Build logs confirm no legacy environment variables (AWS_ACCESS_KEY_ID) are being used.

       

              rh-ee-tizhou Tim Zhou
              rh-ee-tizhou Tim Zhou
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated: