Skip to content

fix(stepfunctions,apigateway): ListMapRuns stateMachineArn, real GenerateClientCertificate PEM#2019

Merged
vieiralucas merged 1 commit into
mainfrom
wt-bh-stub
Jun 28, 2026
Merged

fix(stepfunctions,apigateway): ListMapRuns stateMachineArn, real GenerateClientCertificate PEM#2019
vieiralucas merged 1 commit into
mainfrom
wt-bh-stub

Conversation

@vieiralucas

@vieiralucas vieiralucas commented Jun 28, 2026

Copy link
Copy Markdown
Member

Bug-hunt batch 8 (cycle 6). Two stub fixes.

  • Step Functions ListMapRuns stateMachineArn (LOW-MEDIUM). Returned an empty stateMachineArn for every map run. Now derived from the execution ARN (...:execution:Name:Exec -> ...:stateMachine:Name), so tooling can correlate a map run to its state machine.
  • API Gateway GenerateClientCertificate (MEDIUM). Returned a hardcoded non-parseable PEM (fakecloud-stub), useless for backend mTLS trust. Now returns a real self-signed X.509 certificate via rcgen.

Unit test for the ARN derivation; e2e asserting the client certificate is a real base64-DER-decodable PEM. Builds clean; clippy -D warnings clean.


Summary by cubic

Fixes two stubs: Step Functions ListMapRuns now returns the correct stateMachineArn. API Gateway GenerateClientCertificate now returns a real self‑signed X.509 PEM for backend mTLS.

  • Bug Fixes

    • Step Functions: derive stateMachineArn from executionArn (...:execution:Name:Exec -> ...:stateMachine:Name).
    • API Gateway: generate a real certificate via rcgen instead of a placeholder PEM.
  • Dependencies

    • Add rcgen to fakecloud-apigateway.

Written for commit 51c1df0. Summary will update on new commits.

Review in cubic

…rateClientCertificate PEM

- Step Functions ListMapRuns returned an empty `stateMachineArn` for every map
  run (the MapRun record never stored it). It's now derived from the execution
  ARN (`...:execution:Name:Exec` -> `...:stateMachine:Name`), so tooling can
  correlate a map run to its state machine without extra calls.
- API Gateway GenerateClientCertificate returned a hardcoded non-parseable PEM
  ("fakecloud-stub"), making the cert useless for configuring backend mTLS
  trust. It now returns a real self-signed X.509 certificate via rcgen.

Adds a unit test for the ARN derivation and an e2e asserting the client
certificate is a real, base64-DER-decodable PEM.
@vieiralucas vieiralucas merged commit 15d54dd into main Jun 28, 2026
127 of 128 checks passed
@vieiralucas vieiralucas deleted the wt-bh-stub branch June 28, 2026 02:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant