cloudposse / cloudposse/atmos

helm_aws_profile_pattern default cannot be disabled; no opt-out when migrating to --identity

Open
#2,188 0 comments 1 reaction 2 assignees Claimed by @osterman View on GitHub
bug
Dominant language
Go
Stars
1.4k
Forks
175
Avg merge
2d 3h
Merged PRs (30d)
134

Description

### Describe the Bug

When helm_aws_profile_pattern is not set in atmos.yaml, Atmos applies a hardcoded default value ({namespace}-{tenant}-gbl-{stage}-helm) and attempts to resolve a matching AWS config profile. There is no way to opt out of this behavior.

The deprecation warning instructs users to use --identity instead, but passing --identity does not suppress the profile pattern lookup — the default is still evaluated and the command fails if no matching AWS config profile exists.

### Expected Behavior

When a user omits helm_aws_profile_pattern and provides --identity, the deprecated profile lookup should be skipped entirely. The --identity flag should be a sufficient replacement with no additional configuration required.

### Steps to Reproduce

1. Omit helm_aws_profile_pattern from atmos.yaml (or remove it after seeing the deprecation warning)
2. Run atmos helmfile diff -s --identity
3. Observe the warning and error — Atmos resolves the default pattern {namespace}-{tenant}-gbl-{stage}-helm, fails to find the profile, and exits

### Screenshots

_No response_

### Environment

- Atmos version: 1.207.0
- OS: macOS (darwin/arm64)

### Additional Context

Workaround: explicitly set helm_aws_profile_pattern to a pattern that matches an existing AWS config profile (e.g. {stage}-{region}). The --identity flag alone is not sufficient

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.