Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jonmv/assume azure services #2634

Merged
merged 12 commits into from
Jun 5, 2024

Conversation

jonmv
Copy link
Contributor

@jonmv jonmv commented May 31, 2024

Description

This work in this PR consists of three main contributions, where the first enables the other two:

  1. Integration with Azure's user managed identities, allowing ZTS to obtain access tokens for these.
  2. Allowing Azure access tokens to be obtained based on Athenz identities, specifically, Athenz roles map to Azure identities.
  3. Using an Azure-client identity assigned to the Azure instance provider, allowing ZTS to run this as an internal component.

Contribution Checklist:

  • The pull request does not introduce any breaking changes – Yes, it does, in fact, but it was assumed the InstanceAzureProvider was not in use by others. This is the only breaking change.
  • I have read the contribution guidelines.
  • Create an issue and link to the pull request. – I have not created an issue for this, but the work follows discussions with the maintainers. I can create an issue if this is desired.

jonmv added 11 commits May 31, 2024 11:39
Signed-off-by: jonmv <venstad@gmail.com>
Signed-off-by: jonmv <venstad@gmail.com>
Signed-off-by: jonmv <venstad@gmail.com>
Signed-off-by: jonmv <venstad@gmail.com>
Signed-off-by: jonmv <venstad@gmail.com>
Signed-off-by: jonmv <venstad@gmail.com>
Signed-off-by: jonmv <venstad@gmail.com>
Signed-off-by: jonmv <venstad@gmail.com>
Signed-off-by: jonmv <venstad@gmail.com>
libs/go/zmscli/cli.go Show resolved Hide resolved
}
}

@Override
public void close() {
/* For some reason, the close method is called after each confirmInstance, but the provider is reused, so we can't actually close it.
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

can you please open up an issue for this. it doesn't look right and we need to fix it.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It's because the InstanceAzureProvider used to be a HTTP-type provider, and those are created (and closed) for each request. I think I'll just remove the close here (the default method is empty).

Signed-off-by: jonmv <venstad@gmail.com>
@havetisyan havetisyan merged commit 2c55452 into AthenZ:master Jun 5, 2024
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants