[
https://issues.apache.org/jira/browse/HADOOP-19201?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17853664#comment-17853664
]
ASF GitHub Bot commented on HADOOP-19201:
-----------------------------------------
steveloughran commented on PR #6876:
URL: https://github.com/apache/hadoop/pull/6876#issuecomment-2158366698
I didn't know about this -yes, it could be potentially useful
* the docs need updating too
* our delegation token support, where credentials get passed with a job,
will also need this: org.apache.hadoop.fs.s3a.auth.delegation.RoleTokenBinding
* And ideally, a way of explicitly adding a test in our assumed role tests
-even if it is something we need to manually set up (e.g. we set the constraint
in the role we assume for those tests and verify things work if set, fail if a
wrong one is set.
Now, first step to testing: look at the test policy. You have to run all the
s3 tests against a S3 store of your choice, and as you are doing things with
roles, that must include the assumed role suites. Once you've done that, tell
us where and then it's time to work on the test design -which we can help with.
https://hadoop.apache.org/docs/stable/hadoop-aws/tools/hadoop-aws/testing.html
> Support external id in assume role
> ----------------------------------
>
> Key: HADOOP-19201
> URL: https://issues.apache.org/jira/browse/HADOOP-19201
> Project: Hadoop Common
> Issue Type: Improvement
> Components: fs/s3
> Affects Versions: 3.4.0
> Reporter: Smith Cruise
> Priority: Major
> Labels: pull-request-available
> Fix For: 3.4.1
>
>
> Support external id in AssumedRoleCredentialProvider.java
>
> https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_create_for-user_externalid.html
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
