hawkbit-extensions icon indicating copy to clipboard operation
hawkbit-extensions copied to clipboard

Depend on com.amazonaws.aws-java-sdk-sts

Open zyga opened this issue 2 years ago • 3 comments

This allows using real AWS S3 with a web identity token. See [1] for details. Absence of this dependency requires using less desired password-based authentication.

[1] https://github.com/aws/aws-sdk-java/blob/master/aws-java-sdk-core/src/main/java/com/amazonaws/auth/profile/internal/securitytoken/STSProfileCredentialsServiceLoader.java#L20

Signed-off-by: Zygmunt Krynicki [email protected]

zyga avatar Feb 03 '23 09:02 zyga

Can one of the admins verify this patch?

hawkbit-bot avatar Feb 03 '23 09:02 hawkbit-bot

Was trying to use Web Based authentication with a custom AWS IAM Role when running hawkbit in AWS EKS Kubernetes cluster. Doing this is the best practice when it comes to providing AWS permissions for pods, but without this fix, it's not possible.

I.e, I confirm this is an important patch.

forsberg avatar Apr 24 '23 09:04 forsberg

@stefbehl could we merge this?

zyga avatar Jun 22 '23 13:06 zyga