-
Notifications
You must be signed in to change notification settings - Fork 1.4k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Set AWS credential expiry window to 30 minutes #7116
Set AWS credential expiry window to 30 minutes #7116
Conversation
03380ff
to
5dc625c
Compare
Hi @otterley ! Thanks for opening a PR for this improvement. I realise none of the load options set are being unit tested atm, but I think we can add a test for this one in particular, and improve the overall coverage afterwards. I'll leave a code snipped I came up with rather quickly, so feel free to think of a better way of testing if you wish. (this should be added under
|
Hi @TiberiuGC - I'd be happy to do this, but the testing code is a bit difficult for me to make sense of, so I don't know where this would go. Since you already have a sense of where it should go and how it should be composed, I'd welcome your patch - you can submit a PR against this branch and I'll gladly merge it. |
Sure, no worries, I'll update the tests myself. |
6736ec5
to
074e180
Compare
Thanks @TiberiuGC ! Are we OK to merge? |
@otterley sorry for keeping you waiting, just merged the PR so it will get caught in today's release candidate. |
* Set AWS credential expiry window to 30 minutes * add unit tests * revert changes to mocks --------- Co-authored-by: Tibi <[email protected]>
Description
Set the AWS credential expiry window to 30 minutes. This will force the AWS client to renew any endpoint-provided credentials (e.g. EC2 instance credentials, ECS-provided credentials) if they would expire in less than 30 minutes, and ensure the passed credentials don't expire during long CloudFormation stack operations.
This PR also includes an update to address a broken reference to
pathlib
retracted version v1.0.0, replacing it with v0.15.0. (The retracted version was available via the public Go module proxy, but not available directly to those of us who aren't allowed to use the proxy.)Closes #7095
Checklist
README.md
, or theuserdocs
directory)area/nodegroup
) and kind (e.g.kind/improvement
)BONUS POINTS checklist: complete for good vibes and maybe prizes?! 🤯