search

aws / rolesanywhere-credential-helper

Apache License 2.0
128 stars 38 forks source link

Change existing AWS service connection authentication from access & secret key to OIDC #81

Closed swansonaj closed 2 months ago

swansonaj commented 2 months ago

I tried to modify an existing AWS service connection to switch from access & secret key authentication to OIDC authentication. Using the service connection editor I cleared the access key and checked the "Use OIDC" checkbox (note that I could do nothing with the secret key because it is already empty according to the UI). I then re-ran a pipeline that was using the service connection and received this error:

"##[error]Error: Need to define or omit both "Access Key ID" and "Secret Access Key", not just one."

I strongly suspect this is because I was only able to clear the access key field while the secret key remained unchanged. It would be very helpful if the service connection UI had some technique for clearing the secret key as well or if the runtime just displayed a warning that an orphaned secret key was found but "Use OIDC" was checked so OIDC authentication is assumed. Either way, the ability to modify an existing service connection to switch authentication modes is preferable to requiring users to create a new service connection to take advantage of OIDC.

swansonaj commented 2 months ago

This issue was meant for a different GitHub project.