Josh Siviour 26d53602a3 fix: accept AWS-format IRSA trust-policy condition keys (#1349) ...

* test: cover AWS-form IRSA condition keys and StringLike on web identity

* fix: match AWS-form IRSA condition keys and allow StringLike on web identity

* fix: keep the provider ARN host-path unnormalised for web identity

* feat: log the reason a web identity trust policy denies

* fix: satisfy errname, modernize and gofmt on the denial error

* test: cover the stock AWS IRSA trust policy in the EKS e2e

* test: make the IRSA denial prove the policy was evaluated

2026-10-30 14:34:08 +10:00

..

e2e-coverage.md

fix: accept AWS-format IRSA trust-policy condition keys (#1349)

2026-10-30 14:34:08 +10:00