pulumi / pulumi-kubernetes-operator

A Kubernetes Operator that automates the deployment of Pulumi Stacks
Apache License 2.0
213 stars 54 forks source link

Deploy a stack using STS tokens instead of fixed credentials to access aws resource #591

Open jeduden opened 3 weeks ago

jeduden commented 3 weeks ago

Hello!

Issue details

Currently, it seems the operator is not supporting a process that using STS tokens to access aws resource. Like for example described in this article about using a google cloud platform access aws resources

Affected area/feature

simplest resolution would be to add a new configuration to configure the required "assume-role-with-web-identity" call and then use the produced aws credentials for the remainder of the pulumi stack deployment.

rquitales commented 3 weeks ago

Thanks for reporting this enhancement request and will be adding this to our backlog. I agree that we might want to improve our overall authorization user journeys within this operator.