@forzalabs/remora 1.2.11 → 1.2.12
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +15 -0
- package/index.js +21468 -2231
- package/json_schemas/consumer-schema.json +17 -0
- package/json_schemas/source-schema.json +69 -0
- package/package.json +1 -1
- package/workers/ExecutorWorker.js +21457 -2220
|
@@ -299,6 +299,23 @@
|
|
|
299
299
|
"sessionToken": {
|
|
300
300
|
"type": "string",
|
|
301
301
|
"description": "AWS session token for temporary credentials (for QUEUE triggers)"
|
|
302
|
+
},
|
|
303
|
+
"method": {
|
|
304
|
+
"type": "string",
|
|
305
|
+
"enum": ["access-secret-key", "arn", "implicit", "iam"],
|
|
306
|
+
"description": "Credential method for the queue (QUEUE triggers). 'arn' assumes an IAM role via STS; 'implicit'/'iam' use the AWS SDK default chain (instance/task role); omit or 'access-secret-key' to use static keys."
|
|
307
|
+
},
|
|
308
|
+
"roleArn": {
|
|
309
|
+
"type": "string",
|
|
310
|
+
"description": "ARN of the IAM role to assume via STS when method is 'arn' (for QUEUE triggers)."
|
|
311
|
+
},
|
|
312
|
+
"roleSessionName": {
|
|
313
|
+
"type": "string",
|
|
314
|
+
"description": "Session name for the assumed-role credentials when method is 'arn' (for QUEUE triggers). Defaults to 'remora'."
|
|
315
|
+
},
|
|
316
|
+
"externalId": {
|
|
317
|
+
"type": "string",
|
|
318
|
+
"description": "Optional STS ExternalId for third-party / cross-account trust when method is 'arn' (for QUEUE triggers)."
|
|
302
319
|
}
|
|
303
320
|
},
|
|
304
321
|
"additionalProperties": {
|
|
@@ -44,6 +44,7 @@
|
|
|
44
44
|
"implicit",
|
|
45
45
|
"bearer-token",
|
|
46
46
|
"api-key",
|
|
47
|
+
"oidc",
|
|
47
48
|
"none"
|
|
48
49
|
],
|
|
49
50
|
"description": "The authentication method to use"
|
|
@@ -112,6 +113,18 @@
|
|
|
112
113
|
"type": "string",
|
|
113
114
|
"description": "IAM role or profile name"
|
|
114
115
|
},
|
|
116
|
+
"roleArn": {
|
|
117
|
+
"type": "string",
|
|
118
|
+
"description": "ARN of the IAM role to assume via STS (method 'arn'), e.g. arn:aws:iam::123456789012:role/remora-reader. The base identity that assumes it comes from the AWS SDK default credential chain, not from this config."
|
|
119
|
+
},
|
|
120
|
+
"roleSessionName": {
|
|
121
|
+
"type": "string",
|
|
122
|
+
"description": "Session name attached to the assumed-role credentials (method 'arn'). Defaults to 'remora'."
|
|
123
|
+
},
|
|
124
|
+
"externalId": {
|
|
125
|
+
"type": "string",
|
|
126
|
+
"description": "Optional STS ExternalId for third-party / cross-account trust policies (method 'arn')."
|
|
127
|
+
},
|
|
115
128
|
"clusterId": {
|
|
116
129
|
"type": "string",
|
|
117
130
|
"description": "Redshift cluster identifier"
|
|
@@ -128,6 +141,32 @@
|
|
|
128
141
|
"type": "string",
|
|
129
142
|
"description": "Bearer token used for authentication (Delta Sharing or HTTP API)"
|
|
130
143
|
},
|
|
144
|
+
"tokenEndpoint": {
|
|
145
|
+
"type": "string",
|
|
146
|
+
"description": "OAuth2 token endpoint used with the 'oidc' method to obtain an access token via the client-credentials grant (e.g. Okta or Cognito)"
|
|
147
|
+
},
|
|
148
|
+
"clientId": {
|
|
149
|
+
"type": "string",
|
|
150
|
+
"description": "OAuth2 client identifier for the 'oidc' method"
|
|
151
|
+
},
|
|
152
|
+
"clientSecret": {
|
|
153
|
+
"type": "string",
|
|
154
|
+
"description": "OAuth2 client secret for the 'oidc' method"
|
|
155
|
+
},
|
|
156
|
+
"scope": {
|
|
157
|
+
"type": "string",
|
|
158
|
+
"description": "Space-delimited OAuth2 scopes to request (required by Okta/Cognito for client-credentials)"
|
|
159
|
+
},
|
|
160
|
+
"audience": {
|
|
161
|
+
"type": "string",
|
|
162
|
+
"description": "Optional OAuth2 audience/resource parameter for IdPs that require it"
|
|
163
|
+
},
|
|
164
|
+
"clientAuthMethod": {
|
|
165
|
+
"type": "string",
|
|
166
|
+
"enum": ["basic", "post"],
|
|
167
|
+
"description": "How client credentials are sent to the token endpoint: HTTP Basic header ('basic', default) or request body ('post')",
|
|
168
|
+
"default": "basic"
|
|
169
|
+
},
|
|
131
170
|
"url": {
|
|
132
171
|
"type": "string",
|
|
133
172
|
"format": "uri",
|
|
@@ -239,6 +278,19 @@
|
|
|
239
278
|
},
|
|
240
279
|
"_version": 1
|
|
241
280
|
},
|
|
281
|
+
{
|
|
282
|
+
"name": "S3 via assumed IAM role",
|
|
283
|
+
"description": "S3 source that assumes a cross-account IAM role via STS. Base identity comes from the SDK default chain (instance/task role, SSO, or an assume-only key in env vars) — no data-access keys stored here.",
|
|
284
|
+
"engine": "aws-s3",
|
|
285
|
+
"authentication": {
|
|
286
|
+
"method": "arn",
|
|
287
|
+
"region": "eu-west-1",
|
|
288
|
+
"bucket": "analytics-exports",
|
|
289
|
+
"roleArn": "arn:aws:iam::123456789012:role/remora-s3-reader",
|
|
290
|
+
"externalId": "{REMORA_STS_EXTERNAL_ID}"
|
|
291
|
+
},
|
|
292
|
+
"_version": 1
|
|
293
|
+
},
|
|
242
294
|
{
|
|
243
295
|
"name": "REST API with Bearer Token",
|
|
244
296
|
"description": "HTTP API source with bearer token authentication",
|
|
@@ -267,6 +319,23 @@
|
|
|
267
319
|
"httpMethod": "GET"
|
|
268
320
|
},
|
|
269
321
|
"_version": 1
|
|
322
|
+
},
|
|
323
|
+
{
|
|
324
|
+
"name": "Delta Share with OIDC",
|
|
325
|
+
"description": "Delta Sharing source authenticated via OAuth2 client-credentials (Okta/Cognito)",
|
|
326
|
+
"engine": "delta-share",
|
|
327
|
+
"authentication": {
|
|
328
|
+
"method": "oidc",
|
|
329
|
+
"host": "https://sharing.example.com/delta-sharing",
|
|
330
|
+
"share": "my_share",
|
|
331
|
+
"schema": "my_schema",
|
|
332
|
+
"table": "my_table",
|
|
333
|
+
"tokenEndpoint": "https://example.okta.com/oauth2/default/v1/token",
|
|
334
|
+
"clientId": "{DELTA_SHARE_CLIENT_ID}",
|
|
335
|
+
"clientSecret": "{DELTA_SHARE_CLIENT_SECRET}",
|
|
336
|
+
"scope": "delta_sharing"
|
|
337
|
+
},
|
|
338
|
+
"_version": 1
|
|
270
339
|
}
|
|
271
340
|
]
|
|
272
341
|
}
|