Merge pull request #191 from reasonerjt/irsa-additional-bsl

Unset env vars for role-assumption when creds are set
vmware-tanzu · Feb 1, 2024 · 581fc82 · 581fc82
2 parents 682678f + f5f2e80
commit 581fc82
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/velero-plugin-for-aws/config.go b/velero-plugin-for-aws/config.go
@@ -50,6 +50,10 @@ func newAWSConfig(region, profile, credentialsFile string, insecureSkipTLSVerify
 			// To support the existing use case where config file is passed
 			// as credentials of a BSL
 			config.WithSharedConfigFiles([]string{credentialsFile}))
+		// unset the env variables to bypass the role assumption when IRSA is configured
+		os.Setenv("AWS_WEB_IDENTITY_TOKEN_FILE", "")
+		os.Setenv("AWS_ROLE_SESSION_NAME", "")
+		os.Setenv("AWS_ROLE_ARN", "")
 	}
 
 	awsConfig, err := config.LoadDefaultConfig(context.Background(), opts...)