feat(deploy): env iam_role support

Author: floritange

veadk/cli/cli_deploy.py

@@ -67,6 +67,7 @@
     help="Expected Volcengine Identity client name",
 )
 @click.option("--path", default=".", help="Local project path")
+@click.option("--iam-role", default=None, help="iam role for the vefaas function")
 def deploy(
     volcengine_access_key: str,
     volcengine_secret_key: str,
@@ -80,6 +81,7 @@ def deploy(
     user_pool_name: str,
     client_name: str,
     path: str,
+    iam_role: str,
 ) -> None:
     """Deploy a user project to Volcengine FaaS application.
 
@@ -131,13 +133,20 @@ def deploy(
     from veadk.config import getenv
     from veadk.utils.logger import get_logger
     from veadk.utils.misc import formatted_timestamp, load_module_from_file
+    import os
+    from veadk.config import veadk_environments
 
     logger = get_logger(__name__)
 
     if not volcengine_access_key:
         volcengine_access_key = getenv("VOLCENGINE_ACCESS_KEY")
     if not volcengine_secret_key:
         volcengine_secret_key = getenv("VOLCENGINE_SECRET_KEY")
+    if not iam_role:
+        iam_role = getenv("IAM_ROLE", None, allow_false_values=True)
+    else:
+        os.environ["IAM_ROLE"] = iam_role
+        veadk_environments["IAM_ROLE"] = iam_role
 
     user_proj_abs_path = Path(path).resolve()
     template_dir_path = Path(vefaas.__file__).parent / "template"

veadk/integrations/ve_faas/ve_faas.py

@@ -32,7 +32,7 @@
     zip_and_encode_folder,
 )
 from veadk.utils.logger import get_logger
-from veadk.utils.misc import formatted_timestamp
+from veadk.utils.misc import formatted_timestamp, getenv
 from veadk.utils.volcengine_sign import ve_request
 
 logger = get_logger(__name__)
@@ -118,6 +118,7 @@ def _create_function(self, function_name: str, path: str):
                 request_timeout=1800,
                 envs=envs,
                 memory_mb=2048,
+                role=getenv("IAM_ROLE", None, allow_false_values=True),
             )
         )