[DO NOT MERGE, WIP]Add support to fetch cacertfiles from Amazon S3#14572

Closed

BeichenZhang-BCZ wants to merge 22 commits intorabbitmq:mainfrom

amazon-mq:aws-resource-fetcher

Commits on Sep 30, 2025

Add support to fetch cacertfiles from Amazon S3

sunfinite
authored and
lukebakken
committed
Use AWS session token when present in env or config file. It was only used with IMDSv2 previously.

sunfinite
authored and
lukebakken
committed
First pass of changes for assume role support in resource fetcher

sunfinite
authored and
lukebakken
committed
Fix use of `application:get_env/2` to get from the correct application
lukebakken
committed
Minor Makefile re-org
lukebakken
committed
* Update logging to use `aws arn:` prefix
lukebakken
committed
Refactor to use function head matching instead of nested case
lukebakken
committed
Use `string:split` in a couple places where it is more appropriate.
lukebakken
committed
Add Support to Fetch LDAP Bind Passwords from AWS Secret Manager

Beichen Zhang
authored and
lukebakken
committed
Make Secret Manager Fetcher to Assume Role first before Calling.

Beichen Zhang
authored and
lukebakken
committed
`re:split/3` can use charlists, and return charlists
lukebakken
committed
Fix bug in what is passed to `fetch_s3_object/1`
lukebakken
committed
Change all LOG_INFO to LOG DEBUG, other refactorings, fix use of rabbit_aws when it should be rabbitmq_aws
lukebakken
committed
Reduce code copying via function passing.
lukebakken
committed
Use custom log macros to ensure log lines start with rabbitmq_aws_resource_fetcher
lukebakken
committed
Tighten up logging and error detection
lukebakken
committed
Simplify code for setting LDAP password
lukebakken
committed
Fix error propagation
lukebakken
committed
Simplify LDAP config further, error propagation again
lukebakken
committed
Use existing cacertfile if exists and can be decoded
lukebakken
committed
Only call `assume_role/1` once, before ARNs are processed
lukebakken
committed
1.Configure and Use Confused Deputy Header for STS assume role call 2. Solve bug where STS is called more than once. 3. Solve bugs where type mismatches happened during refactoring. 4. Solve bugs w…

Beichen Zhang
authored and
lukebakken
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

[DO NOT MERGE, WIP]Add support to fetch cacertfiles from Amazon S3#14572

[DO NOT MERGE, WIP]Add support to fetch cacertfiles from Amazon S3#14572
BeichenZhang-BCZ wants to merge 22 commits intorabbitmq:mainfrom
amazon-mq:aws-resource-fetcher

Commits on Sep 30, 2025

Add support to fetch cacertfiles from Amazon S3

Use AWS session token when present in env or config file. It was only used with IMDSv2 previously.

First pass of changes for assume role support in resource fetcher

Fix use of `application:get_env/2` to get from the correct application

Minor Makefile re-org

* Update logging to use `aws arn:` prefix

Refactor to use function head matching instead of nested case

Use `string:split` in a couple places where it is more appropriate.

Add Support to Fetch LDAP Bind Passwords from AWS Secret Manager

Make Secret Manager Fetcher to Assume Role first before Calling.

`re:split/3` can use charlists, and return charlists

Fix bug in what is passed to `fetch_s3_object/1`

Change all LOG_INFO to LOG DEBUG, other refactorings, fix use of rabbit_aws when it should be rabbitmq_aws

Reduce code copying via function passing.

Use custom log macros to ensure log lines start with rabbitmq_aws_resource_fetcher

Tighten up logging and error detection

Simplify code for setting LDAP password

Fix error propagation

Simplify LDAP config further, error propagation again

Use existing cacertfile if exists and can be decoded

Only call `assume_role/1` once, before ARNs are processed

1.Configure and Use Confused Deputy Header for STS assume role call 2. Solve bug where STS is called more than once. 3. Solve bugs where type mismatches happened during refactoring. 4. Solve bugs w…

[DO NOT MERGE, WIP]Add support to fetch cacertfiles from Amazon S3#14572BeichenZhang-BCZ wants to merge 22 commits intorabbitmq:mainrabbitmq/rabbitmq-server:mainfrom amazon-mq:aws-resource-fetcheramazon-mq/upstream-to-rabbitmq-server:aws-resource-fetcherCopy head branch name to clipboard

Commits

Commits on Sep 30, 2025

[DO NOT MERGE, WIP]Add support to fetch cacertfiles from Amazon S3#14572
BeichenZhang-BCZ wants to merge 22 commits intorabbitmq:mainfrom
amazon-mq:aws-resource-fetcher