go/goreleaser
go/goreleaser
1
0
Fork 0
mirror of https://github.com/goreleaser/goreleaser.git synced 2025-02-03 13:11:48 +02:00
Code Issues Releases Activity

feat: Add support for profile and assume an IAM role with MFA prompting

Browse Source 
for token code on stdin when uploading to s3

In case when there are no credentials from provider chain session for S3
client is created with support for profile and assume an IAM role with
MFA prompting for token code on stdin

#754
This commit is contained in:
Krzysztof Grodzicki 2018-08-11 00:09:31 +02:00 committed by Carlos Alexandro Becker
parent 991a1195ff
commit dc0e2bd766
1 changed files with 15 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
internal/pipeline/s3/s3.go
View File

@ -8,6 +8,7 @@ import (
"github.com/apex/log"
"github.com/aws/aws-sdk-go/aws"
"github.com/aws/aws-sdk-go/aws/credentials"
"github.com/aws/aws-sdk-go/aws/credentials/stscreds"
"github.com/aws/aws-sdk-go/aws/session"
"github.com/aws/aws-sdk-go/service/s3"
"github.com/goreleaser/goreleaser/internal/artifact"
@ -74,7 +75,20 @@ func upload(ctx *context.Context, conf config.S3) error {
Profile: conf.Profile,
},
})
sess := session.Must(session.NewSession(awsConfig))
_, err := awsConfig.Credentials.Get()
var sess *session.Session
if err == nil {
sess = session.Must(session.NewSession(awsConfig))
} else {
// Specify profile and assume an IAM role with MFA prompting for token code on stdin
sess = session.Must(session.NewSessionWithOptions(session.Options{
AssumeRoleTokenProvider: stscreds.StdinTokenProvider,
SharedConfigState: session.SharedConfigEnable,
Profile: conf.Profile,
}))
}
svc := s3.New(sess, &aws.Config{
Region: aws.String(conf.Region),
})