21987880162
62%

Ran 13 Feb 2026 01:13PM UTC

Jobs 1

Files 532

Run time 1min

Badge

Embed ▾

Committed 13 Feb 2026 01:04PM UTC coverage: 61.99% (-0.06%) from 62.048%

Build # 21987880162

Build Type

push

github

Committed by

web-flow

Commit Message

Add AWS STS auth type to MCPExternalAuthConfig CRD (#3816)

Extends the MCPExternalAuthConfig CRD with a new 'awsSts' authentication type
that enables AWS STS token exchange with SigV4 request signing for MCP servers.

The AWSStsConfig supports:
- Region and service configuration for SigV4 signing
- Default IAM role ARN for token exchange
- Role claim-based mapping for multi-tenant scenarios
- Session name claim for CloudTrail correlation
- Configurable session duration

This allows vMCP to authenticate with AWS services (like AWS MCP Server) by
exchanging incoming OIDC tokens for temporary AWS credentials using STS
AssumeRoleWithWebIdentity.

Fixes: #3570

Run Details

48 of 130 new or added lines in 6 files covered. (36.92%)

10 existing lines in 3 files now uncovered.

44268 of 71411 relevant lines covered (61.99%)

76.19 hits per line

New Missed Lines in Diff

Lines	Coverage	∆	File
2	86.9	3.73%	cmd/thv-operator/api/v1alpha1/mcpexternalauthconfig_webhook.go
2	78.36	-0.46%	pkg/auth/awssts/middleware.go
4	58.74	-0.48%	cmd/thv-operator/controllers/virtualmcpserver_deployment.go
36	72.07	-13.95%	cmd/thv-operator/pkg/controllerutil/tokenexchange.go
38	35.78	-0.68%	cmd/thv-operator/api/v1alpha1/zz_generated.deepcopy.go

Uncovered Existing Lines

Lines	Coverage	∆	File
2	79.58	-0.53%	pkg/transport/proxy/httpsse/http_proxy.go
2	57.89	-3.51%	pkg/transport/session/sse_session.go
6	75.47	-5.66%	pkg/secrets/keyring/keyctl_linux.go

Jobs

ID	Job ID	Ran	Files	Coverage
1	21987880162.1	13 Feb 2026 01:13PM UTC	532	61.99	GitHub Action Run

stacklok / toolhive / 21987880162
62%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

New Missed Lines in Diff

Uncovered Existing Lines

Jobs

Source Files on build 21987880162

stacklok / toolhive / 21987880162 62%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

New Missed Lines in Diff

Uncovered Existing Lines

Jobs

Source Files on build 21987880162

stacklok / toolhive / 21987880162
62%

README BADGES
x