## START: Set by rpmautospec ## (rpmautospec version 0.8.3) ## RPMAUTOSPEC: autorelease, autochangelog %define autorelease(e:s:pb:n) %{?-p:0.}%{lua: release_number = 1; base_release_number = tonumber(rpm.expand("%{?-b*}%{!?-b:1}")); print(release_number + base_release_number - 1); }%{?-e:.%{-e*}}%{?-s:.%{-s*}}%{!?-n:%{?dist}} ## END: Set by rpmautospec # Generated by go2rpm 1.19.0 # Check assumes a lot of network setup that is not valid %bcond check 0 # Define _unitdir if not already defined %{!?_unitdir: %global _unitdir /usr/lib/systemd/system} # Define _libexec if not already defined %{!?_libexec: %global _libexec /usr/libexec} %define SERVICE_NAME credentials-fetcher.service # https://github.com/aws/credentials-fetcher %global goipath github.com/aws/credentials-fetcher Version: 2.0.1 %gometa -L -f Name: credentials-fetcher Release: %autorelease Summary: Credentials Fetcher Service is used to connect to Active Directory from Linux Instances # Generated by go-vendor-tools License: Apache-2.0 AND BSD-3-Clause AND ISC AND MIT URL: %{gourl} Source0: %{gosource} # Generated by go-vendor-tools Source1: %{archivename}-vendor.tar.bz2 Source2: go-vendor-tools.toml # missing from upstream? Source3: LICENSE.txt BuildRequires: go-vendor-tools BuildRequires: krb5-devel %description Credentials-fetcher is a Linux daemon that retrieves gMSA credentials from Active Directory over LDAP. It creates and refreshes kerberos tickets from gMSA credentials. Kerberos tickets can be used by containers to run apps/services that authenticate using Active Directory. This (v2) is the Golang refactor of the original credentials-fetcher. %prep %goprep -p1 tar -xf %{S:1} cp %{SOURCE3} . cp %{SOURCE3} cmd/credentials-fetcher/ %generate_buildrequires %go_vendor_license_buildrequires -c %{S:2} %build %global gomodulesmode GO111MODULE=on %gobuild -o %{gobuilddir}/bin/credentials-fetcherd ./cmd/credentials-fetcher/main.go %install %go_vendor_license_install -c %{S:2} install -m 0755 -vd %{buildroot}/usr/sbin install -m 0755 -vp %{gobuilddir}/bin/* %{buildroot}/usr/sbin/ # Create additional directory structure in buildroot mkdir -p %{buildroot}%{_unitdir}/ecs.service.d mkdir -p %{buildroot}/var/credentials-fetcher/{krbdir,socket,logging} mkdir -p %{buildroot}/etc/ mkdir -p %{buildroot}%{_libexec} # Copy service file to buildroot cp ./configuration/bin/credentials-fetcher.service %{buildroot}%{_unitdir}/ cp ./configuration/bin/ecs-require-credentials-fetcher.conf %{buildroot}%{_unitdir}/ecs.service.d/ # Copy startup-order userdata script into libexec install -m 0755 ./scripts/credentials-fetcher-startup-order.sh %{buildroot}%{_libexec}/ # Copy config files to buildroot cp ./configuration/conf/credentials-fetcher.conf %{buildroot}/etc/ # Place krb5.conf in /usr/sbin to avoid conflict with system krb5-libs package # umm... not in Fedora we don't... # cp ./configuration/conf/krb5.conf %{buildroot}/usr/sbin/krb5.conf %check %go_vendor_license_check -c %{S:2} %if %{with check} %gotest ./... %endif %post chmod 644 %{_unitdir}/%{SERVICE_NAME} /usr/bin/systemctl daemon-reload # Since `ecs.service` gets a new dependency on `credentials-fetcher.service`, it stops on the initial reload. Start it back up if enabled /usr/bin/systemctl is-enabled --quiet ecs.service 2>/dev/null && /usr/bin/systemctl restart ecs.service || : %postun /usr/bin/systemctl daemon-reload # If this is a full removal, and *NOT* an upgrade: if [ $1 -eq 0 ]; then # If the user ran our systemd dependency script, there will be an out-of-package systemd drop-in for ECS agent. # Remove this, and also clean up the drop-in directory, but only if it is empty after removing ours. if [ -d "/usr/lib/systemd/system/ecs.service.d" ]; then rm /usr/lib/systemd/system/ecs.service.d/require-credentials-fetcher.conf if [ -z "$( ls -A '/usr/lib/systemd/system/ecs.service.d' )" ]; then rm -rf /usr/lib/systemd/system/ecs.service.d fi fi # Service continues running after a full removal, so stop it /usr/bin/systemctl stop credentials-fetcher.service fi %files -f %{go_vendor_license_filelist} %doc docs README.md /usr/sbin/credentials-fetcherd %config(noreplace) /etc/credentials-fetcher.conf %{_unitdir}/credentials-fetcher.service %{_unitdir}/ecs.service.d/ecs-require-credentials-fetcher.conf %dir /var/credentials-fetcher %dir /var/credentials-fetcher/krbdir %dir /var/credentials-fetcher/socket %dir /var/credentials-fetcher/logging %{_libexec}/credentials-fetcher-startup-order.sh %changelog ## START: Generated by rpmautospec * Mon Mar 30 2026 Tom spot Callaway - 2.0.1-1 - move to go, 2.0.1 * Sun Mar 22 2026 Björn Esser - 1.3.8-10 - Update macros * Sun Mar 22 2026 Björn Esser - 1.3.8-9 - Fix BR * Sun Mar 22 2026 Björn Esser - 1.3.8-8 - Rebuild (jsoncpp) * Wed Jan 28 2026 Benjamin A. Beasley - 1.3.8-7 - Rebuilt for abseil-cpp 20260107.0 * Fri Jan 16 2026 Fedora Release Engineering - 1.3.8-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild * Fri Jan 16 2026 Fedora Release Engineering - 1.3.8-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild * Mon Sep 08 2025 Benjamin A. Beasley - 1.3.8-4 - Rebuilt for abseil-cpp 20250814.0 * Wed Aug 06 2025 František Zatloukal - 1.3.8-3 - Rebuilt for icu 77.1 * Wed Jul 23 2025 Fedora Release Engineering - 1.3.8-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild * Fri Jul 18 2025 Tom spot Callaway - 1.3.8-1 - update to 1.3.8 * Thu Jul 17 2025 Tom spot Callaway - 1.3.7-9 - disable tests on el targets too, due to lack of aws-sdk packages * Mon May 26 2025 Benjamin A. Beasley - 1.3.7-8 - Rebuilt for abseil-cpp 20250512.0 * Thu Feb 27 2025 Björn Esser - 1.3.7-7 - Rebuild (abseil-cpp) * Thu Feb 27 2025 Björn Esser - 1.3.7-6 - Use ctest binary instead of ctest3 * Thu Feb 27 2025 Björn Esser - 1.3.7-5 - Rebuild (jsoncpp) * Tue Feb 25 2025 Benjamin A. Beasley - 1.3.7-4 - Rebuilt for abseil-cpp-20250127.0 * Mon Feb 03 2025 Samiullah Mohammed - 1.3.7-3 - Add sources for 1.3.7 * Mon Feb 03 2025 Samiullah Mohammed - 1.3.7-2 - Update spec file for 1.3.7 * Mon Feb 03 2025 Samiullah Mohammed - 1.3.7-1 - Fixes for 1.3.7 * Thu Jan 30 2025 Samiullah Mohammed - 1.3.6-10 - Update dotnet-sdk version * Thu Jan 30 2025 Samiullah Mohammed - 1.3.6-9 - Build error fixes for 1.3.6 * Thu Jan 30 2025 Samiullah Mohammed - 1.3.6-8 - Fix build error due to deprecated dotnet-sdk version * Thu Jan 16 2025 Fedora Release Engineering - 1.3.6-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild * Sun Aug 25 2024 Benjamin A. Beasley - 1.3.6-6 - Rebuilt for abseil-cpp-20240722.0 * Wed Jul 17 2024 Fedora Release Engineering - 1.3.6-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild * Thu Feb 15 2024 Benjamin A. Beasley - 1.3.6-4 - Patch for compatibility with current protobuf * Tue Feb 06 2024 fedora Cloud User - 1.3.6-3 - update credspec to fix errors * Tue Feb 06 2024 fedora Cloud User - 1.3.6-2 - create release 1.3.6 * Tue Feb 06 2024 fedora Cloud User - 1.3.6-1 - create release 1.3.6 * Sun Feb 04 2024 Benjamin A. Beasley - 1.2.0-9 - Rebuilt for abseil-cpp-20240116.0 * Wed Jan 24 2024 Fedora Release Engineering - 1.2.0-8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Fri Jan 19 2024 Fedora Release Engineering - 1.2.0-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Thu Jan 18 2024 Jonathan Wakely - 1.2.0-6 - Rebuilt for Boost 1.83 * Thu Aug 31 2023 Tom Callaway - 1.2.0-5 - rebuild for abseil * Wed Jul 19 2023 Fedora Release Engineering - 1.2.0-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Thu May 18 2023 fedora Cloud User - 1.2.0-3 - Update include arch * Thu May 18 2023 fedora Cloud User - 1.2.0-2 - Update credentialspec * Thu May 18 2023 fedora Cloud User - 1.2.0-1 - Release v1.2.0 * Thu Mar 23 2023 Tom Callaway - 1.1.0-10 - rebuild for new abseil-cpp * Tue Mar 14 2023 Tom Callaway - 1.1.0-9 - fix %%patch syntax for new rpm * Wed Mar 08 2023 Benjamin A. Beasley - 1.1.0-8 - Build as C++17, required by abseil-cpp 20230125 * Thu Feb 23 2023 Tom Callaway - 1.1.0-7 - fix build against boost 1.81 (bz2172636) * Mon Feb 20 2023 Jonathan Wakely - 1.1.0-6 - Rebuilt for Boost 1.81 * Thu Feb 09 2023 Benjamin A. Beasley - 1.1.0-5 - Restore ppc64le support * Thu Feb 09 2023 Benjamin A. Beasley - 1.1.0-4 - Depend on dotnet-sdk-7.0 * Thu Jan 19 2023 Fedora Release Engineering - 1.1.0-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild * Thu Oct 27 2022 Samiullah Mohammed - 1.1.0-2 - v1.1.0 release * Thu Oct 27 2022 Samiullah Mohammed - 1.1.0-1 - Release 1.1.0 * Tue Oct 18 2022 Samiullah Mohammed - 1.0.0-8 - Fix spec for grpc-plugin * Mon Oct 17 2022 Samiullah Mohammed - 1.0.0-7 - Fix dotnet issue for 1.0.0 release * Sat Oct 15 2022 Samiullah Mohammed - 1.0.0-6 - Exclude ppc64le * Sat Oct 15 2022 Samiullah Mohammed - 1.0.0-5 - Try dotnet with --no-dependencies for Koji * Fri Oct 14 2022 Samiullah Mohammed - 1.0.0-4 - Try dotnet build without nuget * Wed Oct 12 2022 Samiullah Mohammed - 1.0.0-3 - Update sources again to fix build for 1.0.0 * Wed Oct 12 2022 Samiullah Mohammed - 1.0.0-2 - Import 1.0.0 sources * Wed Oct 12 2022 Samiullah Mohammed - 1.0.0-1 - Update spec file for 1.0.0 release * Mon Sep 19 2022 Tom spot Callaway - 0.0.94-12 - rebuild for rawhide * Tue Aug 30 2022 root - 0.0.94-11 - Excluded arch armv7hl * Tue Aug 30 2022 Tom spot Callaway - 0.0.94-10 - no i686 * Tue Aug 30 2022 Samiullah Mohammed - 0.0.94-9 - Add grpc-cli to Requires and systemd-rpm-macros to Buildrequires * Mon Aug 29 2022 Samiullah Mohammed - 0.0.94-8 - Add systemd-devel * Mon Aug 29 2022 Samiullah Mohammed - 0.0.94-7 - Add krb5-devel * Mon Aug 29 2022 Samiullah Mohammed - 0.0.94-6 - Fix spec file * Mon Aug 29 2022 Samiullah Mohammed - 0.0.94-5 - Add glib2-devel * Mon Aug 29 2022 Samiullah Mohammed - 0.0.94-4 - Add mono-core * Mon Aug 29 2022 Samiullah Mohammed - 0.0.94-3 - Add gcc-c++ * Mon Aug 29 2022 Samiullah Mohammed - 0.0.94-2 - Delete credentials-fetcher-fedora.spec * Mon Aug 29 2022 Samiullah Mohammed - 0.0.94-1 - Rename to credentials-fetcher.spec ## END: Generated by rpmautospec