[PR #8461] feat(opencode): add AWS Web Identity Token File support for Bedrock #12750

Closed
opened 2026-02-16 18:17:38 -05:00 by yindo · 0 comments
Owner

Original Pull Request: https://github.com/anomalyco/opencode/pull/8461

State: closed
Merged: Yes


Closes #8454

Feature

Adds AWS Web Identity Token File (EKS IRSA) authentication support for Amazon Bedrock.

Implementation

  • Detect AWS_WEB_IDENTITY_TOKEN_FILE environment variable to enable autoload
  • Conditionally set credentialProvider only when no bearer token exists
  • Maintain authentication precedence: bearer token → credential chain

Changes

  • provider.ts: Conditional credentialProvider based on auth method
  • amazon-bedrock.test.ts: Add web identity token test + fix existing test cleanup
  • auth.ts, providers.mdx: Update documentation

Verification

Tested with real EKS IRSA credentials. All tests pass. No regressions in bearer token or access key authentication.

**Original Pull Request:** https://github.com/anomalyco/opencode/pull/8461 **State:** closed **Merged:** Yes --- Closes #8454 ## Feature Adds AWS Web Identity Token File (EKS IRSA) authentication support for Amazon Bedrock. ## Implementation - Detect `AWS_WEB_IDENTITY_TOKEN_FILE` environment variable to enable autoload - Conditionally set `credentialProvider` only when no bearer token exists - Maintain authentication precedence: bearer token → credential chain ## Changes - `provider.ts`: Conditional credentialProvider based on auth method - `amazon-bedrock.test.ts`: Add web identity token test + fix existing test cleanup - `auth.ts`, `providers.mdx`: Update documentation ## Verification Tested with real EKS IRSA credentials. All tests pass. No regressions in bearer token or access key authentication.
yindo added the pull-request label 2026-02-16 18:17:38 -05:00
yindo closed this issue 2026-02-16 18:17:38 -05:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: anomalyco/opencode#12750