-
Notifications
You must be signed in to change notification settings - Fork 9.2k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Allow usage of service principals for KMS grants #32595
Conversation
Community NoteVoting for Prioritization
For Submitters
|
04eb68b
to
0a915ba
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM 🎉
$ go test -v -count=1 ./internal/verify/... | rg "\-\-\-"
--- PASS: TestBase64Encode (0.00s)
--- PASS: TestValidAccountID (0.00s)
--- PASS: TestValidTypeStringNullableFloat (0.00s)
--- PASS: TestValidARN (0.00s)
--- PASS: TestValid4ByteASNString (0.00s)
--- PASS: TestJSONBytesEqualQuotedAndUnquoted (0.00s)
--- PASS: TestValidAmazonSideASN (0.00s)
--- PASS: TestJSONBytesEqualWhitespaceAndNoWhitespace (0.00s)
--- PASS: TestDiffStringMaps (0.00s)
--- PASS: TestSemVerLessThan (0.00s)
--- PASS: TestLooksLikeJSONString (0.00s)
--- PASS: TestValidServicePrincipal (0.00s)
--- PASS: TestNormalizeJSONOrYAMLString (0.00s)
--- PASS: TestSuppressEquivalentJSONDiffsWhitespaceAndNoWhitespace (0.00s)
--- PASS: TestSemVerGreaterThanOrEqual (0.00s)
--- PASS: TestFloatGreaterThan (0.00s)
--- PASS: TestValidLaunchTemplateID (0.00s)
--- PASS: TestValidUTCTimestamp (0.00s)
--- PASS: TestValidLaunchTemplateName (0.00s)
--- PASS: TestValidStringIsJSONOrYAML (0.00s)
--- PASS: TestSuppressEquivalentJSONOrYAMLDiffs (0.00s)
--- PASS: TestValidCIDRNetworkAddress (0.00s)
--- PASS: TestValidIPv6CIDRBlock (0.00s)
--- PASS: TestValidateTypeStringIsDateOrInt (0.00s)
--- PASS: TestValidOnceADayWindowFormat (0.00s)
--- PASS: TestValidIPv4CIDRBlock (0.00s)
--- PASS: TestCheckYAMLString (0.00s)
--- PASS: TestSecondJSONUnlessEquivalent (0.00s)
--- PASS: TestSuppressEquivalentRoundedTime (0.00s)
--- PASS: TestIsIPv4CIDRBlockOrIPv6CIDRBlock (0.00s)
--- PASS: TestValidOnceAWeekWindowFormat (0.00s)
--- PASS: TestValidIAMPolicyJSONString (0.00s)
--- PASS: TestValidIAMPolicyJSONString/{} (0.00s)
--- PASS: TestValidIAMPolicyJSONString/#00 (0.00s)
--- PASS: TestValidIAMPolicyJSONString/[{}] (0.00s)
--- PASS: TestValidIAMPolicyJSONString/"../some-filename.json" (0.00s)
--- PASS: TestValidIAMPolicyJSONString/"{\"Version\":\"...\"}" (0.00s)
--- PASS: TestValidIAMPolicyJSONString/"blub" (0.00s)
--- PASS: TestValidIAMPolicyJSONString/{"xyz":[}} (0.00s)
--- PASS: TestValidIAMPolicyJSONString/____{"xyz":_"foo"} (0.00s)
--- PASS: TestValidIAMPolicyJSONString/{"def":} (0.00s)
--- PASS: TestValidIAMPolicyJSONString/{0:"1"} (0.00s)
--- PASS: TestValidIAMPolicyJSONString/{"abc":["1","2"]} (0.00s)
--- PASS: TestValidIAMPolicyJSONString/{'abc':1} (0.00s)
--- PASS: TestLegacyPolicyNormalize (0.00s)
--- PASS: TestLegacyPolicyNormalize/basic (0.00s)
--- PASS: TestLegacyPolicyNormalize/newOrder (0.00s)
--- PASS: TestLegacyPolicyNormalize/complex1 (0.00s)
--- PASS: TestLegacyPolicyNormalize/id (0.00s)
--- PASS: TestLegacyPolicyNormalize/principal (0.00s)
--- PASS: TestLegacyPolicyNormalize/normalWhitespace (0.00s)
--- PASS: TestLegacyPolicyNormalize/complex2 (0.00s)
--- PASS: TestLegacyPolicyNormalize/badJSON (0.00s)
$ make testacc PKG=kms TESTS=TestAccKMSGrant_
==> Checking that code complies with gofmt requirements...
TF_ACC=1 go test ./internal/service/kms/... -v -count 1 -parallel 20 -run='TestAccKMSGrant_' -timeout 180m
=== NAME TestAccKMSGrant_crossAccountARN
acctest.go:803: skipping test because at least one environment variable of [AWS_ALTERNATE_PROFILE AWS_ALTERNATE_ACCESS_KEY_ID] must be set. Usage: credentials for running acceptance testing in alternate AWS account.
--- SKIP: TestAccKMSGrant_crossAccountARN (0.41s)
--- PASS: TestAccKMSGrant_service (24.26s)
--- PASS: TestAccKMSGrant_arn (34.84s)
--- PASS: TestAccKMSGrant_asymmetricKey (34.93s)
--- PASS: TestAccKMSGrant_bare (35.59s)
--- PASS: TestAccKMSGrant_basic (35.73s)
--- PASS: TestAccKMSGrant_withRetiringPrincipal (35.77s)
--- PASS: TestAccKMSGrant_withConstraints (48.50s)
--- PASS: TestAccKMSGrant_disappears (210.56s)
PASS
ok github.com/hashicorp/terraform-provider-aws/internal/service/kms 213.868s
Forgot to mention in the review, but just needs a changelog. |
0a915ba
to
6bb27c4
Compare
This functionality has been released in v5.10.0 of the Terraform AWS Provider. Please see the Terraform documentation on provider versioning or reach out if you need any assistance upgrading. For further feature requests or bug reports with this functionality, please create a new GitHub issue following the template. Thank you! |
I'm going to lock this pull request because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues. |
Description
Allow usage of service principals for KMS grants
Relations
Relates #25360
Output from Acceptance Testing