-
Notifications
You must be signed in to change notification settings - Fork 130
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
DEVPROD-13971 Add temporary role arn to s3 commands #8682
DEVPROD-13971 Add temporary role arn to s3 commands #8682
Conversation
Also small note, the artifacts uploaded via this cannot be retrieved by Evergreen (i.e. on the files tab it will give AccessDenied when trying to view the file (unless it has public read access). This is why it is still a temporary and not permanent addition |
} | ||
// There must be only one of local_file or extract_to specified. | ||
catcher.NewWhen(c.LocalFile != "" && c.ExtractTo != "", "cannot specify both local file path and directory to extract to") | ||
catcher.NewWhen(c.LocalFile == "" && c.ExtractTo == "", "must specify either local file path or directory to extract to") |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Ty for converting these to the more modern style of error accumulation! 🙏
DEVPROD-13971
Description
This PR adds a temporary role arn to the s3 get and s3 put commands. This role arn will be upgraded to a permanent addition but some more work is needed to make the feature fully fledged.
I also threaded some internal buckets just for otel for now. Later on in the project, it will be used in the commands.
Testing
Unit tests. I also ran this staging task that uploads to a brand new bucket that only trusts the specific role I included in the task (relevant log line).
The bucket before:
![Screenshot 2025-02-06 at 11 47 18 AM](https://private-user-images.githubusercontent.com/64446617/410556277-879048b1-c320-4ee7-a785-e75ede7ee471.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.NBOQ06IUJ_AqdZWICXS7u7UVg3xCeiGIFDELTtkwfzc)
The bucket after:
![Screenshot 2025-02-06 at 11 52 59 AM](https://private-user-images.githubusercontent.com/64446617/410558415-0f03e291-e0a0-405c-b2bd-fdff760f5f3b.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.lRRtQ9o3-thgecxbth9QFmRNfyfz1vh0fXEy8OfHowo)