Skip to content

Commit bd95a49

Browse files
are-cesclaude
andcommitted
LCORE-1724: add credential debug logging for STS troubleshooting
Print length and hash of AWS creds in both assume-role and create steps to detect truncation or corruption during param passing. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
1 parent 63c1d28 commit bd95a49

1 file changed

Lines changed: 10 additions & 0 deletions

File tree

.tekton/integration-tests/pipeline/lightspeed-stack-rhelai-test.yaml

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -81,6 +81,11 @@ spec:
8181
open('$(results.aws-session-token.path)', 'w').write(c['SessionToken'])
8282
"
8383
echo "[sts] Temporary credentials obtained (valid 4h)."
84+
echo "[sts] Key ID length: $(wc -c < $(results.aws-access-key-id.path))"
85+
echo "[sts] Secret length: $(wc -c < $(results.aws-secret-access-key.path))"
86+
echo "[sts] Token length: $(wc -c < $(results.aws-session-token.path))"
87+
echo "[sts] Key ID hash: $(md5sum $(results.aws-access-key-id.path) | cut -d' ' -f1)"
88+
echo "[sts] Token hash: $(md5sum $(results.aws-session-token.path) | cut -d' ' -f1)"
8489
8590
# ── RHEL AI provisioning (MAPT) ──
8691
- name: provision-rhelai
@@ -139,6 +144,11 @@ spec:
139144
export AWS_ACCESS_KEY_ID="$(params.aws-access-key-id)"
140145
export AWS_SECRET_ACCESS_KEY="$(params.aws-secret-access-key)"
141146
export AWS_SESSION_TOKEN="$(params.aws-session-token)"
147+
echo "[mapt] Key ID length: ${#AWS_ACCESS_KEY_ID}"
148+
echo "[mapt] Secret length: ${#AWS_SECRET_ACCESS_KEY}"
149+
echo "[mapt] Token length: ${#AWS_SESSION_TOKEN}"
150+
echo "[mapt] Key ID hash: $(echo -n "$AWS_ACCESS_KEY_ID" | md5sum | cut -d' ' -f1)"
151+
echo "[mapt] Token hash: $(echo -n "$AWS_SESSION_TOKEN" | md5sum | cut -d' ' -f1)"
142152
BUCKET=$(cat /opt/aws-credentials/S3_BUCKET)
143153
RUN_ID="$(context.pipelineRun.name)"
144154
HF_TOKEN=$(cat /opt/aws-credentials/HUGGING_FACE_HUB_TOKEN)

0 commit comments

Comments
 (0)