Skip to content

Commit

Permalink
feat(aws): add support for source_profile (#3834)
Browse files Browse the repository at this point in the history
  • Loading branch information
devmatteini committed Feb 1, 2023
1 parent 4788d8b commit 8e36f30
Showing 1 changed file with 82 additions and 1 deletion.
83 changes: 82 additions & 1 deletion src/modules/aws.rs
Expand Up @@ -176,6 +176,25 @@ fn has_credential_process_or_sso(
)
}

// https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-files.html#cli-configure-files-settings
fn has_source_profile(
context: &Context,
aws_profile: Option<&Profile>,
aws_config: &AwsConfigFile,
aws_creds: &AwsCredsFile,
) -> Option<bool> {
let config = get_config(context, aws_config)?;
let credentials = get_creds(context, aws_creds)?;

let config_section = get_profile_config(config, aws_profile)?;
let source_profile = config_section
.get("source_profile")
.map(std::borrow::ToOwned::to_owned);

let section = get_profile_creds(credentials, source_profile.as_ref())?;
Some(section.contains_key("aws_access_key_id"))
}

fn has_defined_credentials(
context: &Context,
aws_profile: Option<&Profile>,
Expand Down Expand Up @@ -212,10 +231,12 @@ pub fn module<'a>(context: &'a Context) -> Option<Module<'a>> {
return None;
}

// only display if credential_process is defined or has valid credentials
// only display if credential_process, source_profile are defined or has valid credentials
if !config.force_display
&& !has_credential_process_or_sso(context, aws_profile.as_ref(), &aws_config, &aws_creds)
.unwrap_or(false)
&& !has_source_profile(context, aws_profile.as_ref(), &aws_config, &aws_creds)
.unwrap_or(false)
&& !has_defined_credentials(context, aws_profile.as_ref(), &aws_creds).unwrap_or(false)
{
return None;
Expand Down Expand Up @@ -1034,4 +1055,64 @@ sso_role_name = <AWS-ROLE-NAME>

assert_eq!(expected, actual);
}

#[test]
fn source_profile_set() -> io::Result<()> {
let dir = tempfile::tempdir()?;
let config_path = dir.path().join("config");
let credential_path = dir.path().join("credentials");
let mut config = File::create(&config_path)?;
config.write_all(
"[profile astronauts]
source_profile = starship
"
.as_bytes(),
)?;
let mut credentials = File::create(&credential_path)?;
credentials.write_all(
"[starship]
aws_access_key_id=dummy
aws_secret_access_key=dummy
"
.as_bytes(),
)?;

let actual = ModuleRenderer::new("aws")
.env("AWS_CONFIG_FILE", config_path.to_string_lossy().as_ref())
.env(
"AWS_CREDENTIALS_FILE",
credential_path.to_string_lossy().as_ref(),
)
.env("AWS_PROFILE", "astronauts")
.collect();
let expected = Some(format!(
"on {}",
Color::Yellow.bold().paint("鈽侊笍 astronauts ")
));

assert_eq!(expected, actual);
dir.close()
}

#[test]
fn source_profile_not_exists() -> io::Result<()> {
let dir = tempfile::tempdir()?;
let config_path = dir.path().join("config");
let mut config = File::create(&config_path)?;
config.write_all(
"[profile astronauts]
source_profile = starship
"
.as_bytes(),
)?;

let actual = ModuleRenderer::new("aws")
.env("AWS_CONFIG_FILE", config_path.to_string_lossy().as_ref())
.env("AWS_PROFILE", "astronauts")
.collect();
let expected = None;

assert_eq!(expected, actual);
dir.close()
}
}

0 comments on commit 8e36f30

Please sign in to comment.