Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update aws node attestor plugin to include new selectors #3640

Merged

Conversation

guilhermocc
Copy link
Contributor

@guilhermocc guilhermocc commented Nov 24, 2022

Pull Request check list ✔️

  • Commit conforms to CONTRIBUTING.md?
  • Proper tests/regressions included?
  • Documentation updated?

Affected functionality 🤔
Selectors generated on AWS iid node attestor plugin.

Description of change ✍️
Include new selectors that are generated on AWS iid node attestor plugin, these new values are retrieved from the instance identity document used for node attestation:

Selector Example Description
Availability Zone aws_iid:az:us-west-2b The Availability Zone in which the instance is running.
Image ID aws_iid:image:id:ami-5fb8c835 The ID of the AMI used to launch the instance.
Instance ID aws_iid:instance:id:i-0b22a22eec53b9321 The ID of the instance.
Region aws_iid:region:us-west-2 The Region in which the instance is running.

Which issue this PR fixes
fixes #3514

…tance identity document

Signed-off-by: Guilherme Carvalho <guilhermbrsp@gmail.com>
@guilhermocc guilhermocc changed the title Update aws node attestor plugin to include new selectors from the ins… Update aws node attestor plugin to include new selectors Nov 24, 2022
@amartinezfayo amartinezfayo self-assigned this Nov 29, 2022
@rturner3 rturner3 added this to the 1.5.3 milestone Dec 6, 2022
@rturner3 rturner3 self-assigned this Dec 6, 2022
Signed-off-by: Guilherme Carvalho <guilhermbrsp@gmail.com>
@rturner3 rturner3 merged commit a7a95a1 into spiffe:main Dec 9, 2022
divaspathak pushed a commit to divaspathak/spire that referenced this pull request Dec 24, 2022
* Update aws node attestor plugin to include new selectors from the instance identity document

Signed-off-by: Guilherme Carvalho <guilhermbrsp@gmail.com>
Signed-off-by: divaspathak <divaspathak@gmail.com>
stevend-uber pushed a commit to stevend-uber/spire that referenced this pull request Oct 16, 2023
* Update aws node attestor plugin to include new selectors from the instance identity document

Signed-off-by: Guilherme Carvalho <guilhermbrsp@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

plugin server nodeattestor aws iid: Allow for additional selectors from the Instance Identity Document?
3 participants