github/wp-opentofu
0
0
Fork 0
mirror of https://github.com/thegeeklab/wp-opentofu.git synced 2024-11-25 09:40:39 +00:00
Code Issues Releases Activity

verifying the credentials before assumeRole fn

Browse Source
This commit is contained in:
Neemias Junior 2019-11-26 21:54:29 +01:00 committed by Jacob McCann
parent efe3702937
commit 8d8f5c4d78
No known key found for this signature in database
GPG Key ID: B5A476DE32B9AE72
1 changed files with 5 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
plugin.go
View File

@ -77,7 +77,7 @@ func (p Plugin) Exec() error {
} }
} }
if p.Config.RoleARN != "" { if p.Config.RoleARN != "" && !credsSet() {
assumeRole(p.Config.RoleARN) assumeRole(p.Config.RoleARN)
} }
@ -169,14 +169,17 @@ func CopyTfEnv() {
} }
} }
func assumeRole(roleArn string) bool { func credsSet() bool {
awsTokens := []string{"AWS_ACCESS_KEY_ID", "AWS_SECRET_ACCESS_KEY", "AWS_SESSION_TOKEN"} awsTokens := []string{"AWS_ACCESS_KEY_ID", "AWS_SECRET_ACCESS_KEY", "AWS_SESSION_TOKEN"}
for _, token := range awsTokens { for _, token := range awsTokens {
if os.Getenv(token) != "" { if os.Getenv(token) != "" {
return true return true
} }
} }
return false
}
func assumeRole(roleArn string) {
client := sts.New(session.New()) client := sts.New(session.New())
duration := time.Hour * 1 duration := time.Hour * 1
stsProvider := &stscreds.AssumeRoleProvider{ stsProvider := &stscreds.AssumeRoleProvider{
@ -195,8 +198,6 @@ func assumeRole(roleArn string) bool {
os.Setenv("AWS_ACCESS_KEY_ID", value.AccessKeyID) os.Setenv("AWS_ACCESS_KEY_ID", value.AccessKeyID)
os.Setenv("AWS_SECRET_ACCESS_KEY", value.SecretAccessKey) os.Setenv("AWS_SECRET_ACCESS_KEY", value.SecretAccessKey)
os.Setenv("AWS_SESSION_TOKEN", value.SessionToken) os.Setenv("AWS_SESSION_TOKEN", value.SessionToken)
return true
} }
func deleteCache(terraformDataDir string) *exec.Cmd { func deleteCache(terraformDataDir string) *exec.Cmd {