Skip to content

AWS_ROLE_ARN and AWS_WEB_IDENTITY_TOKEN_FILE are stripped from helm #5895

Description

@arturre

Describe the bug

solo is stripping env variables like AWS_ROLE_ARN and AWS_WEB_IDENTITY_TOKEN_FILE breaking EKS IRSA. this was introduced at some point as solo 0.76 doesn't have this issue

Describe the expected behavior

helm should be able to use native EKS IRSA for authentification when executed from solo

To Reproduce

  1. Set env vars for solo like AWS_ROLE_ARN and AWS_WEB_IDENTITY_TOKEN_FILE
  2. replace helm with stub to record env variables
  3. see helm not getting these env vars

Additional Context

The following env vars should be whitelisted and passed to the helm and other tooling when running in AWS EKS cluster to utilize EKS IRSA

`AWS_ROLE_ARN`, 
`AWS_WEB_IDENTITY_TOKEN_FILE`, 
`AWS_REGION`, 
`AWS_DEFAULT_REGION`, 
`AWS_STS_REGIONAL_ENDPOINTS`

Metadata

Metadata

Assignees

Labels

BugA error that causes the feature to behave differently than what was expected based on design docsP0-🔥ASAP

Type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions