Christophe Tafani-Dereeper
Christophe Tafani-Dereeper
Conversely; is there any downside to allowing `sts:SetSourceIdentity` on the role? I think not. Let me send out a PR to make sure this works fine for most people
@prsimoes c.f. #224, can you have a look and confirm it fixes your issue? I attached a Mac OS build below for your convenience https://drive.google.com/file/d/1ZZOJ9HqAIUvXbaIxKXbTmmgRHmfZF-sx/view?usp=sharing
Thanks. Guess it can't hurt to merge it. Thanks for reporting!
Thanks for reporting! What behavior would you expect?
Stratus Red Team already picks up the current context - it should also honor the `KUBECONFIG` environment variable if it's set, c.f. https://github.com/DataDog/stratus-red-team/blob/main/v2/internal/providers/kubernetes.go#L51-L85, but it fails to consider that it...
Thanks for reporting! Definitely agree with you.
Thanks for reporting! Is this really a problem, though? If I were an attacker, I'd likely go with a high timeout. If the returned token has a lower expiration, well...
@stvnswager Can you provide a few examples of scenarios you wanted to test?
Could you add a print to see the response you get?
Could you add a print to see the response you get?