Add scope flag to idp commands

[mustard-mh]

Description

Related Issue(s)

Fixes ENT-34

How to test

idp aws regression tests

• Open workspace with https://github.com/Gitpod-Samples/spring-petclinic
• Exec command blow to install AWS CLI

curl "https://awscli.amazonaws.com/awscli-exe-linux-x86_64.zip" -o "awscliv2.zip"
unzip awscliv2.zip
sudo ./aws/install

• Log into AWS, and check functionalities working

gp idp login aws --scope foo --role-arn=arn:aws:iam::745721252581:role/gitpod-test
aws sts get-caller-identity

• Repeat the same steps with other repo, it should failed

gitpod-samples/spring-petclinic	gitpod-io/empty

Setting of `arn:aws:iam::745721252581:role/gitpod-test`

idp token

• Exec command below should found scope field is included in output

gp idp token --audience foo --scope bar | jq -R 'split(".") | .[0],.[1] | @base64d | fromjson'

Img

Documentation

Preview status

Gitpod was successfully deployed to your preview environment.

• 🏷️ Name - hw-ent-34
• 🔗 URL - hw-ent-34.preview.gitpod-dev.com/workspaces.
• 📚 Documentation - See our internal documentation for information on how to interact with your preview environment.
• 📦 Version - hw-ENT-34-gha.25094
• 🗒️ Logs - GCP Logs Explorer

Build Options

Build

• /werft with-werft
  Run the build with werft instead of GHA
• leeway-no-cache
• /werft no-test
  Run Leeway with --dont-test

Publish

• /werft publish-to-npm
• /werft publish-to-jb-marketplace

Installer

• analytics=segment
• with-dedicated-emulation
• workspace-feature-flags
  Add desired feature flags to the end of the line above, space separated

Preview Environment / Integration Tests

• /werft with-local-preview
  If enabled this will build install/preview
• /werft with-preview
• /werft with-large-vm
• /werft with-gce-vm
  If enabled this will create the environment on GCE infra
• /werft preemptible
  Saves cost. Untick this only if you're really sure you need a non-preemtible machine.
• with-integration-tests=all
  Valid options are all, workspace, webapp, ide, jetbrains, vscode, ssh. If enabled, with-preview and with-large-vm will be enabled.
• with-monitoring

/hold

[svenefftinge]

works like a charm 🎉