Hi Jesse, I’ve found this PR from a while back which suggests the EndpointConfiguration support was once present but then removed: https://github.com/jenkinsci/aws-global-configuration-plugin/pull/3. Would the design of that code be relevant for re-introducing the feature?
Also re instance profiles, I was largely asking to find out if there is significant value in doing the work to depend on the Global Configuration plugin beyond just standardisation. It appears the instance profile doesn’t contain endpoint information, so the plugin could provide extra value after all. Chris On Thu, 12 Dec 2019, at 2:20 PM, Jesse Glick wrote: > On Thu, Dec 12, 2019 at 6:29 AM Chris Kilding > <[email protected]> wrote: > > 1. Does it support storing the AWS Endpoint Configuration (service > > endpoint, signing region)? > > What is currently defined: > > https://javadoc.jenkins.io/plugin/aws-global-configuration/io/jenkins/plugins/aws/global_configuration/CredentialsAwsGlobalConfiguration.html > > > 2. Should plugins inherit their AWS SDK Maven dependency from the Global > > Configuration plugin, or should they redefine their SDK dependency in their > > own POMs? > > Inherit, optionally declaring an explicit dependency on a newer > version of the `aws-java-sdk` plugin. > > > 3. Can it do anything that IAM instance profiles cannot? > > I am not sure I understand the question. `aws-global-configuration` > does not “do” much of anything, it is just a common place to keep > settings. For example, `artifact-manager-s3` defines its own settings > for S3 buckets but relies on `aws-global-configuration` to define > credentials. > > > I imagine that most Jenkins servers on AWS would inherit their AWS config > > implicitly from the IAM instance profile. > > Yes, that is typical. Or in the case of EKS, I have not personally > tried it but I presume via > > https://aws.amazon.com/blogs/opensource/introducing-fine-grained-iam-roles-service-accounts/ > > -- > You received this message because you are subscribed to the Google > Groups "Jenkins Developers" group. > To unsubscribe from this group and stop receiving emails from it, send > an email to [email protected]. > To view this discussion on the web visit > https://groups.google.com/d/msgid/jenkinsci-dev/CANfRfr0dE5rSPrkhxcRsTw%2B%3DPqdXXVOMQoGRCryDkDcQzxY1HQ%40mail.gmail.com. > -- You received this message because you are subscribed to the Google Groups "Jenkins Developers" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-dev/a2db4da3-9224-42f8-96d0-a253d209a345%40www.fastmail.com.
