athens icon indicating copy to clipboard operation
athens copied to clipboard

AWS SDK upgrade for working with AWS EKS IRSA

Open sidprak opened this issue 5 years ago • 4 comments

Describe the bug I am not sure if this is a bug or a feature request :) Looks like Athens uses AWS SDK v1.15.24 but using IAM Roles for Service Accounts in AWS EKS (Kubernetes) requires at least v1.23.13: https://docs.aws.amazon.com/eks/latest/userguide/iam-roles-for-service-accounts-minimum-sdk.html.

Error Message

/readyz throws a 500 without any log messages but it starts to return a 200 if I use an in memory store instead of AWS S3. So I am assuming this is the issue but happy to provide more logs if it's helpful.

To Reproduce Steps to reproduce the behavior:

  1. Run Athens in EKS with an S3 storage backend using IRSA.

Expected behavior It should support IRSA.

Environment (please complete the following information): Using the image from the Docker Hub: gomods/athens:v0.9.0

sidprak avatar Jun 22 '20 22:06 sidprak

The SDK upgrade helped to get support for IRSA but it is still not quite working so I'm reopening this issue. I think we are now hitting https://github.com/aws/aws-sdk-go/issues/3218 because of our use of defaults.CredProviders.

sidprak avatar Jun 23 '20 02:06 sidprak

Oh I cannot reopen this issue :) @marwan-at-work could you please reopen it?

sidprak avatar Jun 23 '20 02:06 sidprak

Reopened even though I am not Marwan! 👍

chriscoffee avatar Jun 23 '20 13:06 chriscoffee