Skip to content

PMM-13045 Add RDS assume role support#5371

Open
HanCheo wants to merge 2 commits into
percona:v3from
HanCheo:feature/rds-assume-role-discovery-pr
Open

PMM-13045 Add RDS assume role support#5371
HanCheo wants to merge 2 commits into
percona:v3from
HanCheo:feature/rds-assume-role-discovery-pr

Conversation

@HanCheo

@HanCheo HanCheo commented May 15, 2026

Copy link
Copy Markdown

PMM-13045

Link to the Feature Build: Percona-Lab/pmm-submodules#4357 (SUBMODULES-4357)

Summary

  • Add optional AWS IAM role ARN support for RDS discovery and RDS exporter configuration.
  • Use provided access/secret keys as source credentials when present, otherwise use the AWS SDK default credential chain for local/IRSA credentials.
  • Preflight credential resolution so STS AssumeRole/source credential failures surface as explicit InvalidArgument errors instead of generic discovery timeouts.
  • Regenerate API artifacts with the AddRDS aws_role_arn field assigned to field number 36 to avoid the existing connection_timeout = 7 field.

API documentation

  • API Docs updated

Related work

Testing

  • go test ./managed/services/management -run 'TestRDSService/DiscoverRDS' -count=1
  • git diff --check HEAD~1..HEAD
  • Local PMM API call with missing/unauthorized source role now returns explicit STS AccessDenied instead of Request timeout.

@HanCheo HanCheo requested a review from a team as a code owner May 15, 2026 13:44
@HanCheo HanCheo requested review from 4nte and ademidoff and removed request for a team May 15, 2026 13:44
@it-percona-cla

it-percona-cla commented May 15, 2026

Copy link
Copy Markdown
Contributor

CLA assistant check
All committers have signed the CLA.

@HanCheo HanCheo force-pushed the feature/rds-assume-role-discovery-pr branch from bf918f2 to c21e473 Compare May 15, 2026 14:07
@HanCheo HanCheo changed the title Add RDS assume role support PMM-13045 Add RDS assume role support May 15, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants