-
- Notifications
You must be signed in to change notification settings - Fork 1.1k
fix: Wrong content for oidc_fully_qualified_audiences in iam-assumable-role-with-oidc #301
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
| | ||
| content { | ||
| test = "StringLike" | ||
| test = "StringEquals" |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I think this is better suited to be a variable if we need to change it - see
| default = "StringEquals" |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Fixed
| } | ||
| | ||
| ##################################### | ||
| # IAM assumable role with audience |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This example doesn't match the changes being made
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Should be fixed now
09c9ce4 to 2ab2a49 Compare | based on your example - is this change needed or are you looking for https://github.com/terraform-aws-modules/terraform-aws-iam/blob/master/modules/iam-github-oidc-role ? |
| This PR has been automatically marked as stale because it has been open 30 days |
Kind of. That would only work for GitHub, while making this change would allow it to work with others such as CircleCI |
…nerating StringLike
Example of how to use GH actions
96e3d5e to 9b88a9c Compare | This PR has been automatically marked as stale because it has been open 30 days |
I have long since created my own module with this implementation, but still see the value in this. What do you think @bryantbiggs ? |
| This PR has been automatically marked as stale because it has been open 30 days |
| This PR was automatically closed because of stale in 10 days |
| I'm going to lock this pull request because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues. If you have found a problem that seems related to this change, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further. |
Fix: fully qualified audiences should generate StringEquals but is generating StringLike
Description
There is a bug that causes oidc_fully_qualified_audiences to create StringLike condition instead of StringEquals condition. This is simply because the content is created with StringLike instead of StringEquals
Motivation and Context
Solves bug
Breaking Changes
I don't know
How Has This Been Tested?
examples/*to demonstrate and validate my change(s)examples/*projectspre-commit run -aon my pull request