Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add kwarg refreshable_credentials. #37

Merged
merged 1 commit into from
May 21, 2021

Conversation

teemuy
Copy link
Contributor

@teemuy teemuy commented Sep 29, 2019

A botocore.credentials.RefreshableCredentials instance can now be provided
instead of static credentials, enabling automatic credential refresh.

@teemuy
Copy link
Contributor Author

teemuy commented Sep 29, 2019

This feature is more or less mandatory for long-running service processes inside a Kubernetes cluster that use AWS IAM assume-role authentication (via kiam/kube2iam). AWS limits maximum assume-role session lifetime to 60 minutes. Our web app uses Elasticsearch, and without RefreshableCredentials it would need to handle recreating the aws4auth object before sessions expire. That would not be practical when using elasticsearch_dsl like we do.

@tedder
Copy link
Owner

tedder commented Mar 3, 2021

this is worth including, can you rebase?

@teemuy teemuy force-pushed the add-refreshable-credentials branch 3 times, most recently from dfc65e9 to 7de4ae1 Compare March 12, 2021 07:43
@teemuy
Copy link
Contributor Author

teemuy commented Mar 12, 2021

Rebased now @tedder

@rxvt
Copy link

rxvt commented May 20, 2021

Any chance of merging this and pushing out a release? We are having the same issue and this would resolve it. Would also resolve #14

@teemuy teemuy mentioned this pull request May 20, 2021
@teemuy
Copy link
Contributor Author

teemuy commented May 20, 2021

Any chance of merging this and pushing out a release? We are having the same issue and this would resolve it. Would also resolve #14

@tedder merge please?

A botocore.credentials.RefreshableCredentials instance can now be provided
instead of static credentials, enabling automatic credential refresh.
@teemuy teemuy force-pushed the add-refreshable-credentials branch from 7de4ae1 to e47b748 Compare May 20, 2021 20:00
@teemuy
Copy link
Contributor Author

teemuy commented May 20, 2021

Rebased to latest master.

@tedder tedder merged commit 9d67671 into tedder:master May 21, 2021
@tedder
Copy link
Owner

tedder commented May 21, 2021

Rebased, prepping a release.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants