1
62%
main: 62%

Ran 13 Feb 2026 01:13PM UTC

Files 532

Run time 11s

Badge

Embed ▾

Committed 13 Feb 2026 01:04PM UTC coverage: 61.99% (-0.06%) from 62.048%

Job # 21987880162.1

Build Type

push

github

Committed by

web-flow

Commit Message

Add AWS STS auth type to MCPExternalAuthConfig CRD (#3816)

Extends the MCPExternalAuthConfig CRD with a new 'awsSts' authentication type
that enables AWS STS token exchange with SigV4 request signing for MCP servers.

The AWSStsConfig supports:
- Region and service configuration for SigV4 signing
- Default IAM role ARN for token exchange
- Role claim-based mapping for multi-tenant scenarios
- Session name claim for CloudTrail correlation
- Configurable session duration

This allows vMCP to authenticate with AWS services (like AWS MCP Server) by
exchanging incoming OIDC tokens for temporary AWS credentials using STS
AssumeRoleWithWebIdentity.

Fixes: #3570

Run Details

44268 of 71411 relevant lines covered (61.99%)

76.19 hits per line

stacklok / toolhive / 21987880162 / 1
62%
main: 62%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 21987880162.1

stacklok / toolhive / 21987880162 / 1 62% main: 62%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 21987880162.1

stacklok / toolhive / 21987880162 / 1
62%
main: 62%

README BADGES
x