Skip to content

feat: ecr cross account assume role#384

Open
Ash-exp wants to merge 4 commits intodevelopfrom
feat/ecr-cross-account-assume-role
Open

feat: ecr cross account assume role#384
Ash-exp wants to merge 4 commits intodevelopfrom
feat/ecr-cross-account-assume-role

Conversation

@Ash-exp
Copy link
Copy Markdown
Contributor

@Ash-exp Ash-exp commented Apr 7, 2026

abhibhaw and others added 2 commits March 31, 2026 13:15
Added AssumeRoleArn field across all services that interact with ECR:

common-lib:
- helmLib/registry: Configuration bean + extractCredentialsForRegistry
- utils/bean: DockerAuthConfig.AssumeRoleArnEcr
- utils/dockerOperations: LoadEcrCredentials with AssumeRole

kubelink:
- gRPC proto: AssumeRoleArn field (tag 15) on RegistryCredential
- adapter: pass AssumeRoleArn to registry Configuration

ci-runner:
- DockerCredentials struct + DockerLogin: STS AssumeRole before ECR auth
- CommonWorkflowRequest: AssumeRoleArn field
- GetDockerAuthConfigForPrivateRegistries: pass ARN
- Added log lines for cross-account login confirmation

image-scanner:
- DockerArtifactStore model: AssumeRoleArn field
- RoundTripperService: STS AssumeRole in GetAuthenticatorByDockerRegistryId
The DockerCredentials literal in StartDockerDaemonAndDockerLogin was
missing AssumeRoleArn, causing ec2rolecreds fallback failure in pods.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@github-actions
Copy link
Copy Markdown

github-actions bot commented Apr 7, 2026

Some linked issues are invalid. Please update the issue links:\nIssue # in is not found or invalid (HTTP }404).\n

@github-actions
Copy link
Copy Markdown

github-actions bot commented Apr 7, 2026

Some linked issues are invalid. Please update the issue links:\nIssue # in is not found or invalid (HTTP }404).\n

@github-actions
Copy link
Copy Markdown

github-actions bot commented Apr 7, 2026

Some linked issues are invalid. Please update the issue links:\nIssue # in is not found or invalid (HTTP }404).\n

@Ash-exp Ash-exp changed the title Feat/ecr cross account assume role feat: ecr cross account assume role Apr 7, 2026
@github-actions
Copy link
Copy Markdown

github-actions bot commented Apr 7, 2026

Some linked issues are invalid. Please update the issue links:\nIssue # in is not found or invalid (HTTP }404).\n

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants