Skip to content

PMM-13045 Add RDS assume role support#5371

Open
HanCheo wants to merge 2 commits into
percona:v3from
HanCheo:feature/rds-assume-role-discovery-pr
Open

PMM-13045 Add RDS assume role support#5371
HanCheo wants to merge 2 commits into
percona:v3from
HanCheo:feature/rds-assume-role-discovery-pr

Conversation

@HanCheo
Copy link
Copy Markdown

@HanCheo HanCheo commented May 15, 2026

PMM-13045

Link to the Feature Build: Percona-Lab/pmm-submodules#4357 (SUBMODULES-4357)

Summary

  • Add optional AWS IAM role ARN support for RDS discovery and RDS exporter configuration.
  • Use provided access/secret keys as source credentials when present, otherwise use the AWS SDK default credential chain for local/IRSA credentials.
  • Preflight credential resolution so STS AssumeRole/source credential failures surface as explicit InvalidArgument errors instead of generic discovery timeouts.
  • Regenerate API artifacts with the AddRDS aws_role_arn field assigned to field number 36 to avoid the existing connection_timeout = 7 field.

API documentation

  • API Docs updated

Related work

Testing

  • go test ./managed/services/management -run 'TestRDSService/DiscoverRDS' -count=1
  • git diff --check HEAD~1..HEAD
  • Local PMM API call with missing/unauthorized source role now returns explicit STS AccessDenied instead of Request timeout.

@HanCheo HanCheo requested a review from a team as a code owner May 15, 2026 13:44
@HanCheo HanCheo requested review from 4nte and ademidoff and removed request for a team May 15, 2026 13:44
@it-percona-cla
Copy link
Copy Markdown
Contributor

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
You have signed the CLA already but the status is still pending? Let us recheck it.

@HanCheo HanCheo force-pushed the feature/rds-assume-role-discovery-pr branch from bf918f2 to c21e473 Compare May 15, 2026 14:07
@HanCheo HanCheo changed the title Add RDS assume role support PMM-13045 Add RDS assume role support May 15, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants