Re: [PATCH 1/1] bitbake: backport fetch2/aws: forward env-vars used in gitlab-ci K8s

[Uladzimir Bely <ubely@ilbers.de>]

On Fri, 2023-11-24 at 15:50 +0800, 'Felix Moessbauer' via isar-users
wrote:
> The patch "fetch2/aws: forward env-vars used in gitlab-ci K8s" was
> accepted upstream as c534526e. We need to backport it here to have
> it already until the next bitbake LTS version is released:
> 
> This patch adds the following variables to the allow-list, which are
> used in the "IAM roles for AWS when using the GitLab chart":
> 
> - AWS_ROLE_ARN
> - AWS_WEB_IDENTITY_TOKEN_FILE
> 
> These variables are set in the CI job environment and are needed to
> access the sstate cache artifacts in a connected S3 bucket.
> 
> Signed-off-by: Felix Moessbauer <felix.moessbauer@siemens.com>
> ---
>  bitbake/lib/bb/fetch2/__init__.py | 2 ++
>  1 file changed, 2 insertions(+)
> 
> diff --git a/bitbake/lib/bb/fetch2/__init__.py
> b/bitbake/lib/bb/fetch2/__init__.py
> index a3140626..008adab9 100644
> --- a/bitbake/lib/bb/fetch2/__init__.py
> +++ b/bitbake/lib/bb/fetch2/__init__.py
> @@ -850,6 +850,8 @@ FETCH_EXPORT_VARS = ['HOME', 'PATH',
>                       'AWS_PROFILE',
>                       'AWS_ACCESS_KEY_ID',
>                       'AWS_SECRET_ACCESS_KEY',
> +                     'AWS_ROLE_ARN',
> +                     'AWS_WEB_IDENTITY_TOKEN_FILE',
>                       'AWS_DEFAULT_REGION']
>  
>  def get_fetcher_environment(d):
> -- 
> 2.39.2
> 

It looks like a fork of bitbake-2.0.12 we currently use in Isar that we
usually tend to avoid. But, probably not at this time...