`assume --exec` broken? about granted HOT 7 CLOSED

PLus 1 to this issue...

--exec -- docker compose up

produces the following error:

docker: 'composeup' is not a docker command.

I'm on v0.20.5

It seems like its broken since v0.20.4

from granted.

I think the fix should work as long as the command to execute is the last variable. According to the read man page, the last variable should contain the whole remainder of the line, no matter if the separator appears in it or not.

from granted.

@abusch You're right, that's convenient, though the fix was a bit more nuanced as arguments with spaces need to be maintained as single arguments so have to be shell escaped: #584

from granted.

I suspect this might have something to do with the strings.Join(execCfg.Args, "") in this line (which probably should be strings.Join(execCfg.Args, " ")).

from granted.

Thanks for raising this @abusch

For now you should be able to run assume --exec -- aws dynamodb list-tables

Using -- after the exec flag means you don't need to use quotes around your command.

I will look into the issue with the quoted exec syntax

from granted.

Unfortunately, using -- doesn't seem to work, neither with bash nor fish. I'm getting the same issue.

from granted.

I think @abusch correctly identified the root-cause as #549, I confirmed this by running assumego --verbose <profile> --exec -- aws sts get-caller-identity which shows that the multiple separate arguments are being correctly parsed:

[DEBUG] exec config:&{aws [sts get-caller-identity]}

However when the GrantedExec output is generated the final argument GRANTED_12 is the concatenated values:

GrantedExec <key> <secret> None us-west-2 None false None None None None aws stsget-caller-identity

Unfortunately I don't think fixing this is as easy as switching from "" to " " though because the IFS=' ' read line would read the additional arguments as different variables (ex: GRANTED_13, GRANTED_14, etc)...

from granted.