Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Allow assuming an AWS role in AWS MSK IAM flow #64

Open
ghost opened this issue May 13, 2022 · 2 comments
Open

Allow assuming an AWS role in AWS MSK IAM flow #64

ghost opened this issue May 13, 2022 · 2 comments
Labels
enhancement New feature or request

Comments

@ghost
Copy link

ghost commented May 13, 2022

I'm integrating your tool into my AWS Kafka infrastructure, and so far it looks like a great fit, but I've stumbled upon a (seemingly) missing feature that I think could be useful.

We have a bunch of Kafka clusters in different regions, so instead of creating separate local AWS profiles for them we use a unified profile with explicit --assume-role for each of the regions/accounts. I can't make it work with topicctl though: AWS_ROLE_ARN is not documented in the AWS Go SDK and doesn't seem to do anything. The only way I could find was generating a bunch of profiles for each of the roles, which quickly gets out of hands.

There appears to be a way to assume a role programmatically in the SDK, so I'm wondering if you could offer an extra configuration option for mechanism: AWS-MSK-IAM, such as assume-role? It'd help a lot.

@yolken yolken added the enhancement New feature or request label May 17, 2022
@yolken
Copy link
Collaborator

yolken commented May 17, 2022

Yup, this shouldn't be too bad. I can take a look in a few days unless someone else wants to help and do it before then.

@yolken
Copy link
Collaborator

yolken commented May 30, 2022

Ok, I have a draft of a fix in #67. Can you give it a try and let me know whether it works for you? Unfortunately, I don't have access to an MSK cluster at the moment to test it on. Thanks.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

1 participant