From 0674325efb2c1de77342ee038605163b71bd48ce Mon Sep 17 00:00:00 2001 From: Anshul Sharma Date: Mon, 15 Jul 2019 08:56:28 +0300 Subject: [PATCH] plugin/route53: fix IAM credential file (#2983) - Fix the ability for CoreDNS to fetch credentials via IAM --- plugin/route53/setup.go | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/plugin/route53/setup.go b/plugin/route53/setup.go index 6eb165863..1872dce4e 100644 --- a/plugin/route53/setup.go +++ b/plugin/route53/setup.go @@ -12,6 +12,8 @@ import ( "github.com/aws/aws-sdk-go/aws" "github.com/aws/aws-sdk-go/aws/credentials" + "github.com/aws/aws-sdk-go/aws/credentials/ec2rolecreds" + "github.com/aws/aws-sdk-go/aws/ec2metadata" "github.com/aws/aws-sdk-go/aws/session" "github.com/aws/aws-sdk-go/service/route53" "github.com/aws/aws-sdk-go/service/route53/route53iface" @@ -100,7 +102,9 @@ func setup(c *caddy.Controller, f func(*credentials.Credentials) route53iface.Ro return c.Errf("unknown property '%s'", c.Val()) } } - providers = append(providers, &credentials.EnvProvider{}, sharedProvider) + providers = append(providers, &credentials.EnvProvider{}, sharedProvider, &ec2rolecreds.EC2RoleProvider{ + Client: ec2metadata.New(session.New(&aws.Config{})), + }) client := f(credentials.NewChainCredentials(providers)) ctx := context.Background() h, err := New(ctx, client, keys, up)