Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Force to Credentials file when IRSA is configured #7374

Merged
merged 1 commit into from
Feb 2, 2024

Conversation

reasonerjt
Copy link
Contributor

This commit makes sure when kopia connects to the repository the crendentials file has the higher priority when the IRSA is configured.

Thank you for contributing to Velero!

Fixes #7302

Please indicate you've done the following:

  • Accepted the DCO. Commits without the DCO will delay acceptance.
  • Created a changelog file or added /kind changelog-not-required as a comment on this pull request.
  • Updated the corresponding documentation in site/content/docs/main.

@@ -0,0 +1 @@
Force to Credentials file when IRSA is configured
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
Force to Credentials file when IRSA is configured
Respect and use `credentialsFile` specified in BSL.spec.config when IRSA is configured over Velero Pod Environment credentials

ywk253100
ywk253100 previously approved these changes Feb 1, 2024
@reasonerjt reasonerjt force-pushed the bypass-irsa-kopia branch 2 times, most recently from 026b04e to 2795d09 Compare February 1, 2024 08:00
@github-actions github-actions bot added the Dependencies Pull requests that update a dependency file label Feb 1, 2024
Copy link

codecov bot commented Feb 1, 2024

Codecov Report

Attention: 49 lines in your changes are missing coverage. Please review.

Comparison is base (08a020e) 61.75% compared to head (30728c2) 61.65%.

Files Patch % Lines
pkg/repository/config/aws.go 0.00% 48 Missing and 1 partial ⚠️
Additional details and impacted files
@@            Coverage Diff             @@
##             main    #7374      +/-   ##
==========================================
- Coverage   61.75%   61.65%   -0.10%     
==========================================
  Files         262      262              
  Lines       28433    28479      +46     
==========================================
  Hits        17558    17558              
- Misses       9643     9689      +46     
  Partials     1232     1232              

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

This commit makes sure when kopia connects to the repository the
crendentials file specified in BSL.spec.config has the higher priority over
Pod Environment credentials when IRSA is configured.

Signed-off-by: Daniel Jiang <jiangd@vmware.com>
@reasonerjt
Copy link
Contributor Author

@kaovilai Thanks for the suggestion I've update the changelog as well as the commit message.

@reasonerjt reasonerjt merged commit cc9c954 into vmware-tanzu:main Feb 2, 2024
22 of 24 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Dependencies Pull requests that update a dependency file has-changelog
Projects
None yet
Development

Successfully merging this pull request may close these issues.

BSL.spec.config["credentialsFile"] overrides AWS Web Identity Token credentials from pod environment
4 participants