Simplify the CodeCommit migration by just using the AWS IAM Credentials #13854

New Issue

GiteaMirror · 2025-11-02T10:55:08-06:00

GiteaMirror commented

2025-11-02 10:55:08 -06:00

Originally created by @changchaishi on GitHub (Dec 19, 2024).

Feature Description

Proposal

In the AWS CodeCommit migration page, the users no longer need to provide https_git_credentials_password and https_git_credentials_username along with aws_access_key_id and aws_secret_access_key to form the remote clone Url. Just AWS credentials are already enough to derive the git auth username and password, by using aws_access_key_id as username and {amazonDateStr}Z{AWSSigv4Signature} as password.

This feature simplifies the process of gathering credentials from AWS for the migration, and also, reduces the confusion to users as to why they need to generate both HTTP (normal git credentials) and AWS Credentials at the same time.

The AWS already has a mechanism and tool for such features to derive the clone URL by just using AWS IAM credentials. The references are source and https://docs.aws.amazon.com/codecommit/latest/userguide/setting-up-git-remote-codecommit.html

The PR I will create is based on the implementation of the tool.

Screenshots

Originally created by @changchaishi on GitHub (Dec 19, 2024). ### Feature Description ## Proposal In the AWS CodeCommit migration page, the users no longer need to provide `https_git_credentials_password` and `https_git_credentials_username` along with `aws_access_key_id` and `aws_secret_access_key` to form the remote clone Url. Just AWS credentials are already enough to derive the git auth username and password, by using `aws_access_key_id` as username and `{amazonDateStr}Z{AWSSigv4Signature}` as password. This feature simplifies the process of gathering credentials from AWS for the migration, and also, reduces the confusion to users as to why they need to generate both HTTP (normal git credentials) and AWS Credentials at the same time. The AWS already has a mechanism and tool for such features to derive the clone URL by just using AWS IAM credentials. The references are [source](https://github.com/aws/git-remote-codecommit/blob/master/git_remote_codecommit/__init__.py) and https://docs.aws.amazon.com/codecommit/latest/userguide/setting-up-git-remote-codecommit.html The PR I will create is based on the implementation of the tool. ### Screenshots ![Snipaste_2024-12-19_14-57-13](https://github.com/user-attachments/assets/3621537b-ea18-4d55-9a58-01c169d7e8ac)

GiteaMirror added the type/proposal label 2025-11-02 10:55:08 -06:00

GiteaMirror closed this issue

2025-11-02 10:55:08 -06:00

GiteaMirror commented

2025-11-02 10:55:09 -06:00

@changchaishi commented on GitHub (Jan 2, 2025):

After digging into the flow of migration and mirror, the effort to simplify this issue is against the current workflow and mechanism. Will not continue.

@changchaishi commented on GitHub (Jan 2, 2025): After digging into the flow of migration and mirror, the effort to simplify this issue is against the current workflow and mechanism. Will not continue.

Sign in to join this conversation.

Branches Tags

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/gitea#13854