Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add ability to chain roles for assume role in cloud storage and KMS #81453

Closed
rhu713 opened this issue May 18, 2022 · 1 comment
Closed

Add ability to chain roles for assume role in cloud storage and KMS #81453

rhu713 opened this issue May 18, 2022 · 1 comment
Assignees
@rhu713
Labels
A-disaster-recovery C-enhancement Solution expected to add code/behavior + preserve backward-compat (pg compat issues are exception) T-disaster-recovery

Comments

@rhu713
Copy link
Contributor

rhu713 commented May 18, 2022 •
edited by exalate-issue-sync bot
Loading

Is your feature request related to a problem? Please describe.
For the CC CMEK project, the design requires that the assume role authorization for KMS to be able chain assume a list of specified roles/service accounts.

Though the project doesn't require chain role auth for cloud storage, it should be straightforward to implement this chaining in order to maintain API consistency as well.

Describe the solution you'd like
Implement chaining for assume role in AWS and GCP.

Describe alternatives you've considered

Additional context

Jira issue: CRDB-15175

Epic CRDB-15037
@rhu713 rhu713 added C-enhancement Solution expected to add code/behavior + preserve backward-compat (pg compat issues are exception) T-disaster-recovery labels May 18, 2022
@blathers-crl
Copy link

blathers-crl bot commented May 18, 2022

cc @cockroachdb/bulk-io

@jlinder jlinder added sync-me and removed sync-me labels May 20, 2022
@shermanCRL shermanCRL mentioned this issue Jul 18, 2022
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@rhu713 rhu713

Labels
A-disaster-recovery C-enhancement Solution expected to add code/behavior + preserve backward-compat (pg compat issues are exception) T-disaster-recovery
Projects
No open projects
Disaster Recovery Backlog
Archived in project
Milestone
No milestone
Development

No branches or pull requests
2 participants
@jlinder @rhu713